“This GRC Space is Hot!” with Varun Gurnaney, Staff Security Engineer at Apple

How does a software engineer become a GRC leader? In this episode of Security & GRC Decoded, host Raj Krishnamurthy welcomes Varun Gurnaney, Staff Security Engineer at Apple. Varun shares his journey from writing janky Python scripts for compliance evidence collection to shaping the discipline of GRC engineering at some of the world’s biggest companies.He discusses the cultural and technical gaps between security, engineering, GRC, and audit — and how automation can bridge them. From building one control really well to proving value through audit automation, Varun lays out why the GRC space is hotter than ever. This conversation is a must-listen for anyone navigating compliance at scale.🔑 5 Key TakeawaysCompliance ≠ Security: Passing audits is not enough — engineering-driven GRC is the future.Start Small: Automate one control well to prove value before scaling automation.Bridging Teams: Cultural friction between engineering, security, GRC, and audit is real — empathy and communication reduce the pain.Audit Anxiety: Audit automation is about reducing anxiety and toil as much as passing audits.GRC Engineering is a Discipline: Whether it lives inside GRC or security, automation is now essential.📚 What You’ll LearnHow Varun transitioned from software engineering into GRC leadershipWhy compliance automation looks different for SMBs, mid-market, and enterprisesThe technical and cultural blockers between engineering and GRCPractical strategies for proving automation value internallyHow generative AI and coding agents will shape audit and compliance automationThis podcast is brought to you by ComplianceCow — the smarter way to manage compliance. Automate evidence collection, eliminate screenshots, and scale your program with confidence.📺 Watch more episodes and learn from top leaders in the GRC space!Connect With Our Guest: Varun Gurnaney | Staff Security Engineer | AppleRate, review, and share if you enjoyed the show!Subscribe to Security & GRC Decoded wherever you get your podcasts:SpotifyApple Podcasts