How to Build Trust Between GRC and Engineering ft Tristan Ingold, Security GRC Program Manager at Meta

Episode notes

How do you build real trust between GRC and engineering? In this episode of Security & GRC Decoded, host Raj Krishnamurthy welcomes Tristan Ingold , Security GRC Program Manager at Meta . Tristan shares how consulting shaped his approach, why “policing” doesn’t work, and how GRC earns influence by acting as a partner to engineering - not a blocker. He discusses the cultural friction between audit, security, and product teams, how to communicate in the language of engineering, and why the right role for GRC is a “sparring partner” that helps teams ship safer, faster. From reframing control objectives to focusing on evidence the business already produces, this conversation is a practical playbook for building credibility and velocity at the same time. 5 Key Takeaways Partnership Over Policing: GRC earns influence by modeling partnership behaviors and meeting teams where they are. Translate Controls to Engineering: Use product language and existing telemetry; design evidence around the way the system actually works. Make It Observable: Treat GRC like an observability layer - surface risk signals the business already emits.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• You Can't Beat Wise on FX. So Now You Partner With Them | Samarth Bansal, General Manager at Wise PlatformPurpose Driven FinTech · on Compliance automation85 / 100
• Datos Insights on How AI, Faster Payments, and Modernization Are Transforming BankingPayments Nerds · on Compliance automation84 / 100
• Why Trade Compliance Fuels Growth, Not FrictionSupply Chain Optimizers · on Compliance automation84 / 100
• The Progressive Firm Pod Podcast S2E5: Rolling out tech without rattling clientsAccountingWEB · on Compliance automation76 / 100
• Practical Strategies for Thriving Amidst Disruption With Chad BlackburnLevelUp Podcast · on Compliance automation75 / 100
• How One CPA Firm Is Leading Firm-Wide AI Adoption NowAccounting Voices · on Compliance automation63 / 100

• The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100
• The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100
• Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100
• From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100
• The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100