Grant Hulley

Approach

I translate technology, cyber and AI into risk, cost and consequence, ask the uncomfortable questions early, and challenge constructively.

For over fifteen years I have advised organisations on the decisions that sit behind their technology: where to invest, which risks to accept, and how to stay accountable for both.

I bring a director's understanding of financial stewardship, legal and regulatory compliance, and the ethical duty owed to clients, staff and stakeholders, and I put it to work where digital, cyber and AI governance need a clear voice.

What I bring

What I bring to the table

Six things a board gains, each one tested in practice as a company director accountable for real budgets, real risk and real people.

01

Investment judgement

Clear advice on where technology money should go, and what it should return, before the commitment is made.

02

Financial stewardship

Turnover upwards of £2m a year, budgets structured into projects of up to £2m, and year-on-year savings against forecast spend.

03

Risk a board can act on

Cyber and information risk explained in terms of likelihood, impact and cost, so directors can decide which risks to accept.

04

Audit & assurance

Annual technology governance and risk audits using the Cyber Assessment Framework, testing statutory and regulatory compliance and risk appetite.

05

Responsible AI adoption

AI governance and legal policies written for organisations from fewer than 10 staff up to 340, with clear accountability and ethical guardrails.

06

Leadership at scale

Leading multiple managers and teams of 30 plus, carrying the full legal and ethical responsibilities of a company director.

Track record

Proven in the businesses I lead

Founder & Director

Managed service provider · Essex

Ghost Enterprises

A managed service provider I founded and direct, with turnover upwards of £2m a year. I separate budgets into projects of up to £2m and deliver year-on-year savings against forecast spend.

Ghost carries out annual technology governance and risk audits for its clients, ensuring statutory and regulatory compliance and gauging each client's risk appetite.

£2m+ turnoverProjects up to £2mSavings vs forecastTeams of 30+Cyber Assessment Framework

Co-owner · gandrgroup.co.uk

G&R Group

The Group I co-own, holding a portfolio across managed IT, investment, charity and specialist technology services.

Explore the Group →

Building now

AI training platform

A full-stack SaaS product for AI best-practice training: curriculum modules, live exercises against a large language model, progress tracking and plan-based access.

Policy work

AI governance & legal policy

Written AI governance and legal policies for organisations from fewer than 10 staff up to 340, so teams can adopt AI with clear rules.

Web builds

Sites people can run

Designing and building websites, such as an author's site rebuilt as an editable WordPress theme the owner can manage himself.

Journey

38 years, plotted

The route so far, from a South African childhood to founding a business and advising at board level.

Origins

Born in South Africa

Where it starts: curiosity about how things work, and a lifelong pull towards the water.

Foundations

Computer Science & Cybernetics

A degree that joined software with systems thinking: how feedback, control and information shape the way organisations behave.

15+ years ago

Founded Ghost Enterprises

Started a technical service provider and grew it into a managed service partner for businesses across Essex, from infrastructure to round-the-clock security.

Growth

Scaling Ghost

Grew turnover upwards of £2m a year, built out cloud, network, security and AI services, and developed a management layer leading teams of thirty and more.

Assurance

Governance & risk audits for clients

Introduced annual technology governance and risk audits using the Cyber Assessment Framework, covering statutory compliance and each client's risk appetite.

Boardroom

Board-level experience

Advising at board level on strategy, finance, cyber risk and legal obligations: budgets, financial oversight and investment decisions, with reporting built for directors who need to make decisions, not decode jargon.

AI era

Governing and teaching AI

Writing AI governance and legal policies for organisations of up to 340 staff, and building a training platform to help teams use AI well.

Bringing a director's grasp of legal, financial and ethical duty to boards where digital, cyber and AI governance need a confident voice.

Credentials

Qualified to be trusted

BScComputer Science & Cybernetics

CISMInformation Security Manager

SIROQualified information risk owner

ITIL v5Service management

AgilePMAgile project management

Off the clock

Happiest on the water

Sailing & water sports

Wind, tide and a good boat

Sailing and water sports are a shared love with my wife. Reading the conditions, trimming for them and adjusting course is good practice for most of what I do at work, too.

Family

Husband & dad of two

The crew that matters most, and the reason the weekends stay protected.

Making

Code & film

Side projects in full-stack SaaS and AI tooling, editing family films frame by frame, and flying drones.

Learning

Teaching AI well

Designing interactive learning experiences, prompt engineering and AI safety.

Roots

South African at heart

Essex-based, with a South African outlook on hard work and hospitality.

Music

Violin, piano & guitar

I play all three, switching between strings and keys whenever there's time to pick one up.

Community

A/V at Fillbridge church

I designed and built our church's audio-visual system myself, and run the sound and visuals for services.

Contact

A confident voice at the table.

I welcome conversations about non-executive, trustee and advisory board roles, particularly where digital, cyber and AI governance need a clear and constructive voice.

GrantHulley