Security & GRC Decoded · 2025-06-12 · 1h 10m
Is it time to stop pretending GRC is technical? Alan Luk makes the case for a new kind of compliance leader - and it might surprise you. In this sharp and unfiltered episode of Security & GRC Decoded , Alan Luk , Director of GRC at Grammarly (and former Microsoft and PwC leader), joins Raj to dismantle common myths about GRC - and why even your engineers might be thinking about it all wrong. Drawing from over 20 years of experience, Alan makes the case for why GRC should be seen as a program management function , not a technical one - and how that shift unlocks better controls, less friction with engineering, and less painful audits. From audit war stories to his vision for continuous assurance, Alan brings blunt honesty, practical insight, and some well-earned hot takes to the mic.
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
The Financial Stakes of Risk Management in a Self-Insured CaptiveThe Canary Report: Safety & Risk Management · on Risk management77 / 100
Corporate Finance Explained | Interest Rate Risk ManagementFinPod · on Risk management75 / 100
From Demo to Production- Building Enterprise AI Agents That Actually Work with Microsoft Copilot Studio with Elliot Margot [MVP]M365.FM · on compliance
How Jamie Dimon Built a Fortress Balance Sheet at JPMorganThe CEO Diary with Fexingo · on Risk managementThe Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100