Why GRC Is More Than Compliance with Kenneth Moras | Head of Security GRC | Plaid

Episode notes

In this episode of Security & GRC Decoded , host Raj Krishnamurthy sits down with Kenneth Moras , Head of Security GRC at Plaid. Kenneth shares his journey from web developer and pen tester to building GRC and assurance teams at scale across leading companies like Adobe , Meta , and now Plaid . The conversation explores how GRC must balance governance, risk, and compliance as distinct but interdependent functions - and why great programs require clarity, collaboration, and simplicity. Kenneth also dives into the origins of the Adobe Common Control Framework (CCF), co-authoring the Open Finance Data Security Standard (OFDSS), and how Plaid applies these principles to secure the future of fintech . From reducing GRC toil through engineering and automation, to the role of AI and LLMs in risk management, Kenneth makes the case that GRC isn’t just about passing audits - it’s about building trust, reducing risk, and enabling innovation. 5 Key Takeaways Career Evolution: Kenneth’s path from developer to GRC leader shows how diverse skills - from IT audit to consulting - strengthen risk leadership.

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• Why the Right Eviction Rate Isn't Zero w/ Brendan from FindigsRisk and Reason · on Plaid92 / 100
• The man who built a bank for people banks don't want - Jason Wilk [Dave]BILLIONS · on Plaid81 / 100
• Revolutionizing Open Banking with Unified APIsThe Headless Banking Podcast · on Plaid75 / 100
• How Kudos built a consumer data moat on top of credit card rewardsTearsheet Podcast: Exploring Financial Services Together · on Plaid72 / 100
• OpenAI ships ChatGPT Personal Finance with Plaid, Anthropic eyes $950bn raise on $30bn ARR, HubSpot launches AEO Sensor for ChatGPT and Gemini visibility, Meta opens Incognito Chat with WhatsApp Private ProcessingThe Daily Marketing Brief · on Plaid71 / 100
• Episode 190: Orchestrating the Future of Credit: How Alternative Data Pipelines are Changing the Lending LandscapeDCA Commerce Code · on Plaid71 / 100

• The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong86 / 100
• The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC76 / 100
• Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath88 / 100
• From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave96 / 100
• The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis86 / 100