GRC as a Growth Engine: From Checklists to Continuous Assurance ft Vivek Madan - Director of Security, Risk, and Compliance @ Fortinet

Episode notes

In this episode of Security & GRC Decoded , Raj Krishnamurthy sits down with Vivek Madan to unpack what it really means to run a modern GRC program inside a global cybersecurity company. Drawing from his journey across networking, security engineering, risk, and compliance, Vivek shares how GRC can function as a true business enabler - opening markets, accelerating revenue, and strengthening trust. This conversation stands out for its practical frameworks, real-world stories, and honest discussion about friction between engineering, security, auditors, and compliance teams, giving listeners a grounded view of how GRC works when it’s done right. Key Takeaways : GRC works best when it is positioned as a growth enabler that unlocks new markets, not just a compliance checkbox. Strong governance establishes foundational rules that allow security and risk decisions to scale consistently across the business. Storytelling is a critical GRC skill - people align with compliance when they understand the “why,” not just the requirement. Common controls frameworks reduce complexity when designed intentionally across global, application-specific, and product-specific needs.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• The Open Book Problem 1: How Your Public Records Become an Attackers' RoadmapThe Small Business Cyber Security Guy · on Fortinet90 / 100
• E198 - What GTM Leaders Can Learn from the Innovation Ecosystem featuring Dave & Joe O'CallaghanTech Sales Insights · on Fortinet63 / 100
• AI Brain Harvest, Fortibleed, Win 10, Blacksite, Windchill, Cisco, BB-8, Josh Marpet - SWN #593Security Weekly Podcast Network · on Fortinet54 / 100
• “Soft Market Surge: Capital Floods In as Risk Industry Eyes New Frontiers”Insurance Intelligence Daily · on Fortinet39 / 100
• FortiBleed Attacks: Turning Fortinet Firewalls into Credential StealersSecure AF · on Fortinet34 / 100
• Ep. 20: Dave Neuman On Software Supply Chains & Small Business Security AdviceThe Threat Show · on Fortinet

• The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100
• The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100
• Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100
• From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100
• The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100