Rosemary Waithera
A dynamic IT professional with an MBA, BSc, and Prosci certification, Rosemary has a strong foundation in information technology, risk management, IT audit, and change management — with over two decades of experience at the Kenya Revenue Authority and in the private sector.
She has led strategic advisory engagements aligning IT operations with enterprise goals through the design and implementation of robust enterprise systems, digital transformation engagements. With her deep expertise in establishing IT governance structures and Enterprise wide systems, her work allows roll-out of robust systems that support executive decision-making, risk management, and regulatory compliance across diverse sectors.
With over two decades of experience, she has successfully led the setup of governance committees, performance monitoring systems, and IT compliance programmes that ensure transparency, accountability, and business value delivery from IT investments — embedding governance into clients' digital strategies to enable sustainable growth, operational efficiency, and strategic alignment.
Michael Ngotho
A certified Governance, Risk and Compliance (GRC) professional holding the designations GRC Auditor, GRC Professional, CISA, CISM, and CRISC. He is a Fellow of the OCEG Institute (USA) and an ISACA Platinum Member, with a BSc-IT from JKUAT and certifications in AI & Machine Learning from MIT and Health Data Analytics from Rochester Institute of Technology.
With over 20 years' experience across the public and private sectors — including KPMG East Africa, where he worked on client digital transformation, and Barclays Africa (now ABSA), where he led the technology and risk function — Michael has worked with several development partners including USAID, The Global Fund, the European Union, World Bank, DANIDA, and COMESA, supporting health, agriculture, finance, schools, energy, and governance sectors.
Michael leads our risk and advisory functions. He works with our clients and leads our teams to design and implement secure, scalable and commercially viable solutions around our key areas of Data, Infrastructure, and Systems.
He oversees our risk and advisory functions, internal audits, and control evaluations, providing actionable insights to mitigate regulatory and operational risks.