How Pragmatic Controls Build Trust Between GRC, Security, and Engineering ft Mukund Sarma, Deputy CISO @ Chime

Episode notes

In this episode of Security & GRC Decoded , host Raj Krishnamurthy sits down with Mukund Sarma , Deputy CISO and Head of Product Security at Chime , to explore what happens when governance, risk, and compliance teams work with engineering instead of against it. Mukund shares real-world lessons from a decade in security, explaining how to balance shift-left initiatives, build paved paths that reduce friction, and make compliance a natural byproduct of great engineering. This is a masterclass in aligning security, GRC, and DevOps for scale and sanity. 5 Key Takeaways GRC isn’t a blocker - it’s a mirror that keeps security honest and accountable. Strong security engineering automatically strengthens compliance outcomes. Friction between security and engineering fades when empathy drives collaboration. “Shift left” works best when paved paths and automation support developers. Practical controls and continuous validation create sustainable, scalable governance. What You’ll Learn How to bridge silos between security, GRC, and engineering teams. Why automation and continuous control monitoring are the future of compliance.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CU 2.0 Podcast Episode 411 Travis Credit Union CEO Kevin Miller on Why Bankers Make Good CU CEOsThe CU2.0 Podcast · on Chime74 / 100
• From the Garden to the Branch: A Knicks Win, a Chase Misquote, and the Zillennial Investment OpportunityWhat's Going On In Banking · on Chime69 / 100
• Should I Chase a Higher Savings Rate? Can We Semi-Retire in Our 40s? How Do We Rebuild After Bankruptcy? (Money Q&A)The Personal Finance Podcast · on Chime62 / 100
• Starting a Bank in the Age of AIPlugged In · on Chime58 / 100
• One Size Doesn't Fit All in Benefits with Kristen Jordan, Benefits & Wellness Manager at ChimeThe Benefits Playbook · on Chime

• The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100
• The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100
• Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100
• From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100
• The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100