Alan Luk has seen GRC from every angle, from Big 4 audit and consulting, leading GRC teams, and now GRC engineering at Microsoft Azure.

In this episode of Risk Grustlers, he joins Nicholas Muy (CISO and VP of Engineering at Scrut Automation) for a candid conversation on the decisions modern GRC teams are being forced to make: what to own, what to enable, when to escalate, and how to work with engineering without turning every audit issue into a fire drill.

Featuring

• Alan Luk, Principal TPM, Microsoft 
• Nicholas Muy, CISO and VP of Engineering, Scrut Automation

About Scrut Automation:
Scrut Automation empowers scaling companies to move Beyond Compliance, focusing on managing digital risk while reducing the friction of audit preparation, evidence collection, and risk monitoring.

Purpose-built for high-growth startups and mid-market businesses, Scrut simplifies the most tedious parts of compliance and risk management, keeping you audit-ready and risk-aware at all times. With seamless integration into your processes, Scrut delivers real-time insights and continuous monitoring, enabling proactive risk management to support sustainable growth. Focus on scaling your business confidently as Scrut automates compliance and strengthens your digital resilience—no more manual work or compliance chaos.

To watch more of our episodes and learn more about us, visit us at :
https://www.scrut.io/podcasts