Sign up to save your podcasts
Or
Share From Engineering to GRC: A first-hand account of the GRC talent gap
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
From Engineering to GRC: A first-hand account of the GRC talent gap
As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.
Guests: Shruti (GRC Professional)
Hosts: Troy Fine, Kendra Cooley
Producer: Elliot Volkman
Runtime: ~55 minutes
Show Notes & Segments:
00:00 – Intro & Banter
Casual chatter and AI banter with the crew, including Shruti’s first ChatGPT query and a few carrot cake recipes.
09:00 – GRC’s Image Problem: Is It Just Boring?
Shruti discusses the perception problem around GRC, generational gaps in interest, and why it’s often viewed as unsexy or undervalued work.
14:30 – Reframing the Pipeline: Who Should We Be Recruiting?
The group considers alternative talent pipelines, especially mid-career professionals who better understand the strategic value of GRC.
Quote: “Maybe it’s time to come to the good side.” – Kendra
20:30 – The Role of AI and Automation: Friend or Foe?
Shruti and the hosts weigh in on how automation platforms are shaping the field—for better or worse—and whether GRC jobs are at risk of being replaced.
Quote: “I treat AI like an intern. It can do some of the work, but I’ll always check it before it leaves the building.” – Shruti
26:00 – What Should New GRC Pros Learn?
Shruti shares what she wishes she had known earlier—especially around audit practices—and the value of soft skills and continuous learning.
30:30 – Critical Thinking, Not Just Checkboxes
Why GRC professionals must retain their ability to think critically, validate automation outputs, and question assumptions.
Quote: “We are losing our ability to be critical thinkers.” – Kendra
36:00 – Does GRC Need to Be Technical Now?
Shruti unpacks how her technical background helps her talk with engineers, understand tooling, and embrace AI; arguing that technical fluency is becoming essential.
44:30 – Final Thoughts: Risk Culture, Knowledge Transfer, and the Future
The group reflects on the need to pass down GRC fundamentals, resist overreliance on AI, and target new demographics for hiring.
Hosted on Acast. See acast.com/privacy for more information.
View all episodes
By ChaosAs organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.
Guests: Shruti (GRC Professional)
Hosts: Troy Fine, Kendra Cooley
Producer: Elliot Volkman
Runtime: ~55 minutes
Show Notes & Segments:
00:00 – Intro & Banter
Casual chatter and AI banter with the crew, including Shruti’s first ChatGPT query and a few carrot cake recipes.
09:00 – GRC’s Image Problem: Is It Just Boring?
Shruti discusses the perception problem around GRC, generational gaps in interest, and why it’s often viewed as unsexy or undervalued work.
14:30 – Reframing the Pipeline: Who Should We Be Recruiting?
The group considers alternative talent pipelines, especially mid-career professionals who better understand the strategic value of GRC.
Quote: “Maybe it’s time to come to the good side.” – Kendra
20:30 – The Role of AI and Automation: Friend or Foe?
Shruti and the hosts weigh in on how automation platforms are shaping the field—for better or worse—and whether GRC jobs are at risk of being replaced.
Quote: “I treat AI like an intern. It can do some of the work, but I’ll always check it before it leaves the building.” – Shruti
26:00 – What Should New GRC Pros Learn?
Shruti shares what she wishes she had known earlier—especially around audit practices—and the value of soft skills and continuous learning.
30:30 – Critical Thinking, Not Just Checkboxes
Why GRC professionals must retain their ability to think critically, validate automation outputs, and question assumptions.
Quote: “We are losing our ability to be critical thinkers.” – Kendra
36:00 – Does GRC Need to Be Technical Now?
Shruti unpacks how her technical background helps her talk with engineers, understand tooling, and embrace AI; arguing that technical fluency is becoming essential.
44:30 – Final Thoughts: Risk Culture, Knowledge Transfer, and the Future
The group reflects on the need to pass down GRC fundamentals, resist overreliance on AI, and target new demographics for hiring.
Hosted on Acast. See acast.com/privacy for more information.