Security & GRC Decoded

Is it time to stop pretending GRC is technical? Alan Luk makes the case for a new kind of compliance leader—and it might surprise you. In this sharp and unfiltered episode of Security & GRC Decoded , Alan Luk , Director of GRC at Grammarly (and former Microsoft and PwC leader), joins Raj to dismantle common myths about GRC—and why even your engineers might be thinking about it all wrong. Drawi...

Is it time to rethink SOC 2? (Spoiler: Adam thinks so—and he’s got the receipts.) In this insightful episode of Security & GRC Decoded , Adam Brennick , Director of Security Risk & Compliance at Cockroach Labs , joins Raj to challenge the status quo of SOC 2 , compliance culture , and how GRC teams should operate in a modern, engineering-driven world . With a unique perspective from leadin...

In this episode of Security and GRC Decoded , Raj Krishnamurthy sits down with Andrew Spangler , Director of Security and GRC at Harness , to explore how compliance engineering can go far beyond checkboxes—and actually drive innovation. Andrew shares his journey from building the compliance engineering function at Datadog to scaling automation and visibility across the SDLC at Harness. He dives in...

In this episode, Raj Krishnamurthy sits down with Josh Bressers , VP of Security at Anchore and longtime leader in the open source security space. With decades of experience, Josh brings a candid and compelling perspective on everything from the chaos of early cybersecurity days to the nuanced challenges of SBOMs and compliance in today’s world. Josh reflects on how he entered the security world b...

In this episode, Raj Krishnamurthy sits down with Kieran Pierman , GRC & Security at Whatnot , and a former security, risk and compliance leader at Cruise and Dropbox , to explore fresh perspectives on Security & GRC . Kieran opens with a bold stance: data breaches, while critical, aren't the top threat they used to be. Instead, he argues, maintaining availability and service uptime i...

Ever wondered if your GRC team should be writing code? (Spoiler alert: Jeevan thinks they probably should.) In this eye-opening episode of Security & GRC Decoded, Jeevan Singh, Director of Security Engineering at Rippling, joins Raj to challenge traditional views of Governance, Risk, and Compliance (GRC). Jeevan passionately argues why GRC teams must become more technical, automated, and deepl...

In this episode, Raj Krishnamurthy interviews Shobhit Mehta , Director of Security and Compliance at Headspace , to uncover valuable insights into the evolving world of Governance, Risk, and Compliance (GRC). Shobhit shares his controversial perspective on GRC teams overburdening themselves, emphasizing the need for GRC professionals to expand their technical expertise and embrace a product manage...

In this episode of Security & GRC Decoded , host Raj Krishnamurthy (CEO of ComplianceCow) sits down with Ayoub Fandi , a Staff Security Assurance Engineer at GitLab and co-author of the GRC Engineering Manifesto, for a deep dive into the evolution of GRC through an engineering lens . Ayoub shares how his background in consulting and cloud-native startups led him to question the traditional, ch...

In this episode of Security & GRC Decoded, host Raj Krishnamurthy, CEO of ComplianceCow, sits down with Carlos Batista —former CISO and AWS Security Engineering Leader—to explore the evolving landscape of security, governance, and risk management. Carlos shares his journey from leading security in highly regulated industries like banking and energy to championing large-scale security engineeri...

In this episode of Security & GRC Decoded , host Raj Krishnamurthy , CEO of ComplianceCow, sits down with Abhay Kshirsagar , Director of Security Services and Tools at Salesforce, to explore the evolving landscape of security, compliance, and customer assurance . Abhay shares his journey from IT audit and risk advisory to leading compliance automation, continuous monitoring, and customer assur...

In this episode of Security & GRC Decoded , Raj Krishnamurthy , CEO of ComplianceCow, sits down with Walter Haydock , CEO of StackAware , to discuss the evolving landscape of AI security, governance, risk, and compliance (GRC) . Walter shares insights on emerging AI threats, the importance of ISO 42001 certification , and the challenges organizations face when integrating AI into their securit...

In the premiere episode of Security & GRC Decoded , host Raj Krishnamurthy sits down with Mosi Platt, Senior Security Compliance Engineer at Netflix , to explore his unconventional journey into security and governance, risk, and compliance (GRC). From his first exposure to computers in his aunt’s home lab to becoming a leader in IT audits and compliance, Mosi shares the pivotal moments that sh...