EPISODE · Jun 19, 2025 · 55 MIN
From Engineering to GRC: A first-hand account of the GRC talent gap
from GRC Uncensored
As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.Guests: Shruti (GRC Professional)Hosts: Troy Fine, Kendra CooleyProducer: Elliot VolkmanRuntime: ~55 minutesShow Notes & Segments:00:00 – Intro & BanterCasual chatter and AI banter with the crew, including Shruti’s first ChatGPT query and a few carrot cake recipes.09:00 – GRC’s Image Problem: Is It Just Boring?Shruti discusses the perception problem around GRC, generational gaps in interest, and why it’s often viewed as unsexy or undervalued work.14:30 – Reframing the Pipeline: Who Should We Be Recruiting?The group considers alternative talent pipelines, especially mid-career professionals who better understand the strategic value of GRC.Quote: “Maybe it’s time to come to the good side.” – Kendra20:30 – The Role of AI and Automation: Friend or Foe?Shruti and the hosts weigh in on how automation platforms are shaping the field—for better or worse—and whether GRC jobs are at risk of being replaced.Quote: “I treat AI like an intern. It can do some of the work, but I’ll always check it before it leaves the building.” – Shruti26:00 – What Should New GRC Pros Learn?Shruti shares what she wishes she had known earlier—especially around audit practices—and the value of soft skills and continuous learning.30:30 – Critical Thinking, Not Just CheckboxesWhy GRC professionals must retain their ability to think critically, validate automation outputs, and question assumptions.Quote: “We are losing our ability to be critical thinkers.” – Kendra36:00 – Does GRC Need to Be Technical Now?Shruti unpacks how her technical background helps her talk with engineers, understand tooling, and embrace AI; arguing that technical fluency is becoming essential.44:30 – Final Thoughts: Risk Culture, Knowledge Transfer, and the FutureThe group reflects on the need to pass down GRC fundamentals, resist overreliance on AI, and target new demographics for hiring. Hosted on Acast. See acast.com/privacy for more information.
What this episode covers
As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.Guests: Shruti (GRC Professional)Hosts: Troy Fine, Kendra CooleyProducer: Elliot VolkmanRuntime: ~55 minutesShow Notes & Segments:00:00 – Intro & BanterCasual chatter and AI banter with the crew, including Shruti’s first ChatGPT query and a few carrot cake recipes.09:00 – GRC’s Image Problem: Is It Just Boring?Shruti discusses the perception problem around GRC, generational gaps in interest, and why it’s often viewed as unsexy or undervalued work.14:30 – Reframing the Pipeline: Who Should We Be Recruiting?The group considers alternative talent pipelines, especially mid-career professionals who better understand the strategic value of GRC.Quote: “Maybe it’s time to come to the good side.” – Kendra20:30 – The Role of AI and Automation: Friend or Foe?Shruti and the hosts weigh in on how automation platforms are shaping the field—for better or worse—and whether GRC jobs are at risk of being replaced.Quote: “I treat AI like an intern. It can do some of the work, but I’ll always check it before it leaves the building.” – Shruti26:00 – What Should New GRC Pros Learn?Shruti shares what she wishes she had known earlier—especially around audit practices—and the value of soft skills and continuous learning.30:30 – Critical Thinking, Not Just CheckboxesWhy GRC professionals must retain their ability to think critically, validate automation outputs, and question assumptions.Quote: “We are losing our ability to be critical thinkers.” – Kendra36:00 – Does GRC Need to Be Technical Now?Shruti unpacks how her technical background helps her talk with engineers, understand tooling, and embrace AI; arguing that technical fluency is becoming essential.44:30 – Final Thoughts: Risk Culture, Knowledge Transfer, and the FutureThe group reflects on the need to pass down GRC fundamentals, resist overreliance on AI, and target new demographics for hiring. Hosted on Acast. See acast.com/privacy for more information.
NOW PLAYING
From Engineering to GRC: A first-hand account of the GRC talent gap
No transcript for this episode yet