Business, Delivery & Transformation Analyst · QA/UAT Tester · United Kingdom

Requirements you can trust. Delivery you can stand behind.

I work at the point where business needs get translated into working software, and where working software gets checked against what it was actually supposed to do. This site tracks that work as it happens, case by case.

MSc AI & Data Science, University of Hull BEng Computer Engineering CPRE Foundation (IREB) — in progress
I · Who I am

About

I'm a Business, Delivery & Transformation Analyst and QA/UAT Tester currently working across a live digital transformation programme at 3MG Consulting and a consumer marketplace app at KB Matrix. Before moving into tech, I worked in support work at Wilf Ward Family Trust, experience that shaped how I think about the people on the other end of a requirement or a bug report.

I'm also building an AI governance and reliability audit practice on the side, evaluating AI systems against frameworks like the OWASP LLM Top 10 and NIST AI RMF, grounded in original federated learning research from my MSc dissertation. It's early and self-directed, and this site is where I'm building it in public rather than waiting until it's finished.

II · Delivery & transformation work

Business, Delivery & Transformation

2 case studies

3MG Consulting — Digital Transformation Programme

VERIFIED · LIVE PROGRAMME
Business, Delivery & Transformation Analyst / UAT Tester

Elicited, documented, and validated business requirements across a live digital transformation programme, producing BPMN 2.0 process maps and functional specifications.

  • Facilitated workshops with 8 stakeholders, three times weekly, translating business needs into clear, actionable requirements.
  • Designed and executed 10 manual test cases against real-world and edge-case scenarios; achieved 100% accuracy against specification, zero defects to production.
  • Evaluated and documented failure modes each sprint to support evidence-based release readiness decisions.
Why it matters: Closes the loop between what stakeholders ask for and what actually gets shipped, requirements go in one end, validated, defect-free delivery comes out the other.

CareForward Group — AI Automation Business Case

VERIFIED · SELF-DIRECTED PORTFOLIO
AI Enablement Portfolio · June 2026

A full Business Analyst delivery cycle run independently, without a brief or assigned scope: discovery, current-state process mapping, opportunity identification, business case production, BPMN process design, RACI governance, benefits realisation, change management, governance documentation, and AI agent design, applied to a fictional social care organisation using real operational knowledge from the care sector.

The problem

Support workers in residential care homes lose an estimated 40–72 hours per week across a three-shift team to manual administrative logging, 5–15 minutes of every hour spent on devices instead of care. Medication records carry the highest error risk, and early health deterioration is often caught only through informal verbal observation, lost between shifts.

Four opportunities identified and quantified

PriorityOpportunityAnnual value
1Voice-to-text care logging£18,720–£46,800 / home
1Medication error preventionROI > 10:1
2Early health deterioration detection£60K–£90K in avoided admissions
2AI-assisted handover summaries£6,240–£15,600 / home

Combined annual value: £100,000–£160,000 per home.

Grounded in original research, not assumption

Every recommendation traces back to my MSc dissertation on federated learning for threat detection, the same anomaly-detection mechanism (train on normal, flag high reconstruction error) transfers from network intrusion detection to care log and health-baseline anomaly detection. Dissertation results: 0.95 accuracy, 0.95 F1-score, 0.99 AUC, and 0.9934 SHAP stability under bootstrapped perturbation, with performance held under 30% feature corruption.

Governance built in, not bolted on

  • Full AI Governance Pack: Acceptable Use Policy, six-risk Risk Register with likelihood/impact/mitigation/owner, and a CQC-auditable AI Decision Log template.
  • Federated architecture throughout, individual health data never leaves the care home server, satisfying UK GDPR special-category handling.
  • Human sign-off mandatory before any AI output is used; SHAP-explained audit trail for every flagged decision.
  • Benefits Realisation Framework defining baseline, target, measurement method and named owner for every opportunity.
  • Change & Adoption Pack: plain-English colleague communications, a shift-floor prompt guide, and a four-week Early Adopter champion framework.
Why it matters: Shows the full BA lifecycle run end-to-end without anyone assigning it, opportunity identification, quantification, governance, and the change management to actually land it with frontline staff, backed by original technical research rather than templated recommendations.
CareForward Group is a fictional organisation built for this portfolio; the operational context is drawn from real care-sector experience and all AI performance metrics are cited from original MSc research.
III · QA & testing work

QA / UAT Testing

1 case study

KB Matrix — Stylist Booking App (iOS, Staging)

VERIFIED · 3 DEFECTS LOGGED
QA / UAT Tester · App v2.0.0(92)

KB Matrix connects clients with Afro and textured hair stylists across the UK and Europe. I test client and stylist-facing flows ahead of production release.

  • Blocking defect: Stylist email/password sign-up returned a "Bad Request" error, preventing new stylist onboarding entirely.
  • UX defect: Saving a client profile preference didn't return the user to their profile, trapping them behind a non-dismissible confirmation popup.
  • Platform inconsistency: Notifications settings skipped the native permission prompt and redirected straight to system settings, breaking standard iOS convention.
Why it matters: Caught a launch-blocking defect on the supply side of a two-sided marketplace before it reached production, plus two UX issues that wouldn't show up as "broken" in a pass/fail test script.
IV · Building in public

AI Governance & Reliability Audit

in progress

AI Reliability Audit — Service Framework

IN PROGRESS
Targeting seed–Series B vertical AI SaaS founders & cybersecurity vendors

A service evaluating AI systems for hallucination, prompt injection, jailbreak, and policy failure risk, mapped to established frameworks rather than ad hoc checks.

When

You're shipping an AI feature and can't yet answer "what happens when it's wrong."

What

Evaluation against the OWASP LLM Top 10 and NIST AI RMF, with a defined pricing structure and 30-day rollout plan.

Outcome

A plain-language risk report and an ordered fix list.

  • Exploring bug bounty and red-teaming routes (Mozilla 0din, Gray Swan Arena) as proof-of-skill before first paid client.
  • Underpinned by original federated learning research from my MSc dissertation on anomaly detection and SHAP explainability under adversarial conditions.
Next milestone: first published self-audit of a public AI tool, applying the same framework, coming soon.

Foundational research: Federated LogAE-XGBoost-SHAP for DoS Detection

VERIFIED · MSC DISSERTATION
University of Hull, August 2025

A federated learning pipeline for Zero Trust intrusion detection, comparing centralised and federated training on the UNSW-NB15 dataset, the empirical question underneath every audit I run: can a system stay accurate without centralising sensitive data.

  • Federated model reached 0.95 accuracy, 0.95 F1-score, 0.99 AUC, matching centralised performance while keeping all training data on local clients.
  • SHAP explanations held 0.9934 Spearman rank stability under bootstrapped perturbation, and performance held under 30% feature corruption.
  • Includes an honest scoping note on what was cut from the original three-domain proposal, and why, plus a documented failed approach (hybrid feature selection collapsing to 0.14 accuracy) kept in the write-up because the failure was informative.
Why it matters: This is the technical foundation the AI Reliability Audit framework is built on, not a separate credential, the same reconstruction-error and SHAP-stability logic used here is what powers the care-anomaly detection in the CareForward case study above.

First Applied Case Study

COMING SOON

Reserved for the first applied audit, a real evaluation of a public AI system, written up with the same rigor as the case studies above. No placeholder claims here until there's a real one to show.

V · At a glance

Skills

Requirements

Elicitation, BPMN 2.0, functional specs, stakeholder facilitation, RACI design

Testing

Functional, regression & exploratory testing, UAT, cross-device/OS/browser compatibility

Delivery

Business case production, benefits realisation, change management, Jira, defect reporting

AI Governance

OWASP LLM Top 10, NIST AI RMF, federated learning, SHAP explainability, AUP & risk register design

VI · Start a conversation

Let's talk

Open to Business Analyst, QA/UAT, and AI governance conversations.