From Cruise to Whatnot: Kieran Pierman’s GRC Playbook

Episode notes

In this episode, Raj Krishnamurthy sits down with Kieran Pierman , GRC & Security at Whatnot , and a former security, risk and compliance leader at Cruise and Dropbox , to explore fresh perspectives on Security & GRC . Kieran opens with a bold stance: data breaches, while critical, aren't the top threat they used to be. Instead, he argues, maintaining availability and service uptime is now paramount. Drawing from his unique experience building the foundational GRC program at Cruise, a pioneering self-driving car company, Kieran reveals how managing cybersecurity risks took on profound urgency - literally life-and-death implications - when securing autonomous vehicles. Throughout the conversation, Kieran shares actionable insights on: Why availability and uptime are today's most critical security priorities. How building GRC at Cruise required an uncompromising security posture due to the potential consequences of vehicle security breaches. Why GRC should be seen as an engineering discipline rather than a checkbox function. Practical strategies to shift GRC from a cost center to a profit-driving role. The importance of automation, technical fluency, and proactive risk management.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• The Content Management System Landscape with Matt GarrepyRunAs Radio · on security80 / 100
• Edge AI Security: Why Secure-by-Design Engineering MattersEmbedded Insiders · on security79 / 100
• Azure Well-Architected Framework - Simply ExplainedM365.FM · on Automation63 / 100
• A Strong Audit Plan Turns Compliance Into TrustThe Finance Leader Podcast · on compliance
• Special Series: The Trust Advantage - When Trust Wins in Payments with Darrel Anderson, Payroc | Episode 523Leaders In Payments · on compliance
• EP1032: Channel bans at a four-year highIBS Intelligence Global FinTech Interviews · on compliance

• The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100
• The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100
• Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100
• From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100
• The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100