Keith Bennett | Cyber Recovery & Cloud Transformation

WHAT I DO

I deliver technology change at enterprise scale.

30 years across architecture, infrastructure, and programme leadership. I've designed platforms, migrated thousands of servers, built data centres, and led cyber recovery. That hands-on technical background is the difference. I know what good looks like at every level, from the rack to the board report. Data over opinions, outcomes over activity, velocity over perfection.

Where I add most value:

Complex estates where the technical detail actually matters
Programmes spanning multiple partners, geographies, and delivery models
Transformation that has to land while the business keeps running
Environments where security is a delivery requirement, not an afterthought
Restoring an enterprise after a major incident, then building the resilience that means it doesn't happen twice

If you need strategic thinking, hire a consultant. If you need something delivered, call me.

HOW I WORK

Data Drives Everything

I don't make decisions based on who speaks loudest in meetings. Every programme I run has clear metrics tracked daily. When migration velocity drops, I know why before the weekly meeting. When costs trend wrong, we fix it immediately. In high-stakes recovery situations, the timeline is shorter. You can't afford to wait for the weekly report. Real-time data and honest status is the difference between recovery and repeated failure.

Right People, Right Roles

I've built teams of 150+ across multiple continents and partners. Different cultures, different working styles, different expectations. You can't manage everyone the same way. The fundamentals don't change though: clear accountability, authority that matches responsibility, treat people right, and remove the obstacles that stop competent people doing their best work. Teams that feel trusted and respected will outperform managed ones every time.

Remove Friction, Not Governance

Most delays aren't technical. They're process problems: three layers of approval for a routine decision, teams waiting for other teams who are waiting for approval from someone on holiday. I find these bottlenecks and eliminate them. Governance stays. We just stop confusing it with bureaucracy.

Communicate Relentlessly

In matrix organisations with multiple partners and competing priorities, over-communication is barely enough. Everyone sees the same data. Everyone knows what's blocking progress. Everyone understands the plan. When you communicate this way, politics reduce and delivery accelerates.

Speed Compounds

Small, fast iterations beat perfect plans every time. I'd rather deliver something in two weeks and course-correct than spend two months planning the theoretically optimal solution. Momentum matters. Early wins build confidence, and visible progress attracts the resources and support that planning documents never will.

Technology Serves Outcomes

I've worked across Azure, AWS, GCP, IBM Cloud, and complex hybrid environments. This breadth means I recommend what actually works for your situation, not what I know best. The technology choice matters less than clear requirements, realistic timelines, and teams empowered to execute.

WHY THIS APPROACH

The pattern is consistent. Programmes that deliver have clear goals, empowered teams, and leaders who remove obstacles instead of creating them. The ones that don't are drowning in governance, waiting for decisions that never come, and confusing activity with progress.

I've seen both, many times over. The difference is rarely the technology. It's organisational: whether accountability is clear, whether decisions actually get made, and whether competent people are allowed to execute.

If you need someone who prioritises consensus over delivery or treats process as more important than results, I'm not your person. If you need technology change that actually lands, that's what I do.

M&S Plc

Head of Programmes - Hosting & Core Operations (Contract)

Oct 2025 – Jul 2026

Accountable for security, modernisation, data centre exit, and disaster recovery across M&S hosting platforms. Not separate programmes but one that grew: recovery became security improvement, data centre exit was added, then a unified hosting programme defined around a single secure managed platform, one toolset, one team.
Grew the security improvement programme straight out of the recovery work. Established governance and delivery cadence, moving it from planning into execution within weeks of taking accountability. Delivery covered CIS controls, end-of-life remediation, vulnerability management, observability, and recoverability across the hosting estate.
Led a major data centre exit from mobilisation through to its final stages, rebuilding it from independent workstreams into a single integrated programme with executive governance, dependency mapping, and evidence-based planning. Scope spanned network transformation, application migration governance, and physical decommissioning.
Created a multi-phase environment stabilisation and modernisation roadmap covering segmentation, identity and access, engineering and SDLC improvements, and the target operating model.
Managed a blended team of consultancy partners, contract PMs, network engineering, and 40+ partner infrastructure resources. Single point of accountability for hosting transformation delivery.
Chaired programme boards and steering forums, and authored executive decision papers for CTO and CISO covering investment, risk, and resource prioritisation.
Built a standardised CTO reporting pack providing consistent delivery status, week-on-week commentary, and clear separation of Transform & Change vs Operate & Run activity. Adopted across the portfolio as the reporting standard.

Tags PROGRAMME MANAGEMENT TRANSFORMATION SECURITY HOSTING DATA CENTRE EXIT

Service Management Transformation Programme Manager (Interim)

Dec 2025 – Mar 2026

Picked up alongside the hosting portfolio as interim lead until a permanent owner was appointed. Rescoped the programme around an MVP delivery plan and drove standardisation of service management processes across the CTO organisation.
Restructured it, set it up to succeed, and handed it over.

Tags PROGRAMME MANAGEMENT SERVICE MANAGEMENT TRANSFORMATION

Foundational Infrastructure Programme Lead (Contract)

May 2025 – Oct 2025

Joined M&S shortly after the cyber incident as Head of Cloud Migration. Role evolved into Foundational Infrastructure Workstream Lead within the enterprise recovery programme.
Led on-premise infrastructure recovery, managing a cross-functional team of nearly 100 people across four global delivery partners. Reported daily to CIO and COO for six months under sustained board scrutiny.
Recovered the on-premise estate and restored the services that depended on it.
Delivered a secure remote access capability for colleagues and third-party partners, scaled from pilot to full rollout within three months.
Fast-tracked restoration of core finance systems and interfaces to enable half-year PLC reporting on schedule.
Sequenced service recovery across a fragmented estate by what unblocked the most downstream activity, with dependencies spanning infrastructure, networks, operations, security, and strategic partners.
Defined the bridge from recovery to resilience, establishing how M&S would exit recovery mode while retaining the ways of working and addressing core learnings.

Tags PROGRAMME MANAGEMENT INFRASTRUCTURE RECOVERY

WPP Plc

Cloud Acceleration & Transition Lead (Permanent)

Jun 2024 – May 2025

Transitioned Cloud Acceleration Programme from partner-delivered model to internal business-as-usual capability. Established team with end-to-end ownership of workload migration and onboarding. Developed 2025 project pipeline expanding multi-cloud capabilities to include GCP and AWS alongside Azure. Implemented prioritisation framework aligned to cost reduction objectives.

Tags PROGRAMME MANAGEMENT AZURE AWS GCP OPTIMISATION

Head of Cloud Acceleration Programme (Permanent)

Jul 2023 – Jun 2024

Led programme rescue and transformation. Delivered 3,500+ server migrations, built 3 new IBM Cloud data centres replacing 11 legacy facilities, generated £1m+ annual savings. Scaled team to 150+ across multiple partners. Programme awarded WPP IT Collaboration Team of the Year 2023.

(See Featured Project below for details.)

Tags PROGRAMME MANAGEMENT AZURE IBM CLOUD MIGRATION COLLABORATION

Global Solution Architecture & Engineering Lead (Permanent)

Jan 2022 – Jun 2023

Led discovery phase and scope definition for Cloud Acceleration Programme. Managed RFP process for Managed Service Provider selection. Programme managed cyber recovery and cloud migration of core financial reporting platform following security incident, reporting daily to CIO and Legal.

Tags PROGRAMME MANAGEMENT AZURE IBM CLOUD MIGRATION

Distributed Global Transformation Lead (Permanent)

Apr 2021 – Dec 2021

Completed data centre exit projects and defined infrastructure refresh programmes covering servers, storage, and end-of-life management. Delivered 250+ file server migrations to Azure File Sync.

Tags PROGRAMME MANAGEMENT AZURE TRANSFORMATION

Global Transformation Lead (Contract)

Feb 2018 – Mar 2021

Programme managed exit of 5 EMEA data centres for Grey Operating Company. Developed global DC exit programme with Kyndryl as delivery partner.

Tags PROGRAMME MANAGEMENT ON-PREMISE MANAGED SERVICE

WPP Parent Company Transformation Lead (Contract)

Apr 2017 – Jan 2018

Developed tools and processes for IBM Transformation Programme. Delivered architectural designs for infrastructure and desktop services onboarding to managed service.

Tags ENTERPRISE ARCHITECTURE ON-PREMISE MANAGED SERVICE

Enterprise Transformation Architect (Contract)

Jul 2015 – Mar 2017

Provided architectural assurance for £1.2 billion outsourcing to IBM covering Service Desk, Service Management, End User Computing, Infrastructure, and Network Services. Produced Infrastructure Transformation Framework defining migration patterns and processes. Oversaw deployment of multi-million pound SaaS ERP platform (Deltek Maconomy).

Tags ENTERPRISE ARCHITECTURE ON-PREMISE PATTERNS

The Situation

July 2023. I was promoted to lead WPP's Cloud Acceleration Programme, eighteen months in and with little to show for it. Migration velocity was low, stakeholder confidence was eroding, and there was no credible path to completing the work.

The scope was ambitious:

Disposition 10,000+ servers across 11 regional data centres
Migrate to Azure Public Cloud and IBM Private Cloud
Build new infrastructure while maintaining business operations
Coordinate multiple delivery partners: Kyndryl, Rackspace, TCS
Navigate WPP's complex matrix organisation

Ambition without execution is just PowerPoint.

What Changed

Three moves.

First, I established what success actually meant. Not strategy documents, numbers. Servers migrated per week. Cost removed per quarter. What percentage of the estate had been assessed, planned, executed, validated. Everyone worked from the same dashboard, showing progress and blockers together.

Second, I removed friction. Decision-making had become archaeological, layer on layer of process with no clear accountability. I pushed decisions down to the execution teams, cut redundant approvals, and made it explicit that moving fast mattered more than getting every detail theoretically perfect.

Third, I fixed the team structure. People were working hard in the wrong configuration. I moved resources to the bottlenecks, clarified roles, and removed the dependencies that were creating waiting time. The right people in the right places, with the authority to execute.

Within two months, migration velocity had doubled. Within six, we had momentum that had looked impossible at the start.

What We Delivered

Infrastructure:

Built 3 new IBM Cloud data centres, replacing 11 legacy facilities
Migrated 3,500+ servers to Azure and IBM Cloud
Decommissioned 5,000+ servers that analysis showed were no longer required
Reached peak velocity of 350 server migrations in a single month
Fully dispositioned the entire 10,000+ server estate

Business impact:

Generated £1m+ in annual savings through consolidation
Eliminated 540 metric tonnes of CO2 annually from decommissioned infrastructure
Reduced technical debt from ageing platforms
Created repeatable migration patterns for future work

Programme execution:

Scaled the team from an initial core to 150+ people across WPP, Kyndryl, Rackspace, and TCS
Maintained budget control while accelerating delivery
Awarded WPP IT Collaboration Team of the Year, December 2023

Handing It Over

Delivering the migration was half the job. The other half was making sure WPP did not need a partner-led programme for what came next.

With the main objectives delivered, the remaining work was a long tail: pockets of smaller operating companies still to migrate, spread across the group. That needed a standing capability rather than a programme, so I transitioned from the partner-delivered model to an internal team of around 10 people based in India, with end to end ownership of workload migration and onboarding. I built the forward pipeline, extending multi-cloud beyond Azure to GCP and AWS, and put a prioritisation framework in place tied to cost reduction targets. By May 2025 it was running as business as usual, owned and delivered in house.

What Made the Difference

This was not heroic effort or technical brilliance. It was removing the organisational obstacles stopping competent people from executing.

Clear data meant problems surfaced early, while they were still cheap to fix. Simplified process meant decisions took days rather than weeks. The right team structure meant work flowed instead of queueing behind dependencies.

The lesson is not specific to cloud migration. It applies to any complex programme in any large organisation: most delivery problems are organisational, not technical. Fix those and technical people will handle the technical work.

Before WPP, I spent nearly two decades across infrastructure architecture, solution architecture, and database administration roles. Clients included British American Tobacco, EE, Nokia, Virgin Mobile, TalkTalk, AOL, Oracle UK, and various government and private sector organisations.

Career progression: Started in database support (1992), moved through Oracle DBA and Internet consulting roles, into infrastructure architecture (2003), then solution architecture working on large enterprise transformations (2008–2015).

This foundation in how systems actually work informs every programme decision I make today.

Notable earlier roles:

Global Solution Architect, British American Tobacco (2012–2015)
Lead Infrastructure Architect, Virgin Mobile UK (2003–2007), permanent role, 4+ years
Oracle DBA Consultant, SWEB/EDF Energy (1995–2000)
Database Consultant, Oracle UK (1993–1994)

Full career history available on request.

Previous employment history
WHAT AND WHERE	WHEN	TYPE
Global Solution Architect, British American Tobacco, London	Jan 2012 – Apr 2015	Contract
Solution Architect, EE, Bristol	July 2011 – Dec 2011	Contract
Project Solution Architect, British American Tobacco, London	Sep 2010 – Jun 2011	Contract
Infrastructure Solution Architect, Nokia UK, Bristol	Mar 2010 To Aug 2010	Contract
Technical Spaces Lead, Guys and St Thomas' NHS, London	July 2009 to Dec 2009	Contract
Infrastructure Architect, TalkTalk Group, London	Oct 2008 to Mar 2009	Contract
Infrastructure Architect, AOL Broadband, London	Dec 2007 to Sept 2008	Contract
Senior Infrastructure Architect, Beacon Home Loans, Marlow	July 2007 to Nov 2007	Contract
Lead Infrastructure Architect, Virgin Mobile UK, Trowbridge	Feb 2003 to June 2007	Permanent
Oracle DBA Consultant, Cap Gemini Ernst & Young, Bristol	Mar 2001 to Dec 2002	Permanent
Oracle Internet Consultant, E-Net Software, Bristol	Aug 2000 to Mar 2001	Permanent
Oracle DBA Consultant, SWEB (now EDF Energy), Plymouth	Nov 1995 to Jul 2000	Contract
Oracle DBA Consultant, Devonport Mgt Ltd, Plymouth	Jul 1995 to Nov 1995	Contract
Production Support DBA, Cellnet (now 02), Slough	Sept 1994 to July 1995	Contract
Database Consultant, Oracle UK, Bracknell	Sept 1993 to Sept 1994	Permanent
Database Support Analyst, Amerada Hess Ltd, London	Nov 1992 to Sept 1993	Permanent
Software Engineer, Devonport Management Ltd, Plymouth	Jan 1990 to Nov 1992	Permanent

My Life

QUOTES I ASPIRE TO LIVE BY

Think Different: innovation requires challenging conventional thinking — Whilst the team is always bigger than the individual, sometimes you need to think in a new way and try something different

Data-driven problem solving: methodical approach to complex challenges — Driven By Data, Data, Data … Understand The Data, Manage The Data, Report On The Data

Home Life

Husband, Father, Geek

Twenty years in the same corner of Wiltshire, most of my career spent travelling out of it and back again. Family is the fixed point. The working pattern gets arranged around that, not the other way round.

The geek part is long-standing rather than recent. There is a home lab here running automation, storage, monitoring and DNS, none of which is strictly necessary. It exists because reading about infrastructure is not the same as running it, and I would rather have broken something myself than only read about it going wrong somewhere else.

Otherwise: a committed armchair supporter of Liverpool FC and Formula 1, and I play golf when I can.

WWYSA

IT Admin & Safety Boat Crew

Apr 2023 to present

Outside of client work, I volunteer with West Wiltshire Youth Sailing Association, managing their IT infrastructure, Microsoft 365 environment, and occasionally driving the safety boat as a qualified PB2 powerboat handler.

The same principles that guide my professional work apply here: understand what you're trying to achieve, find the right tools, eliminate friction, and make systems work together efficiently.

Keith Bennett volunteering as safety boat crew at West Wiltshire Youth Sailing

keithbennett.me

Manager, Not Builder

This website used to run on WordPress. I rebuilt it with an AI agent, managing the work rather than doing it.

The point wasn't the website. It was finding out what happens when you treat an agent as a team: give it deliverables, a scope, a review gate, and no authority to publish on its own. Along the way I finally learned how git actually works.

What surprised me was the shape of it. A software release is still a set of things that have to get done, in order, to reach an outcome. That's programme delivery.

Coming Soon