In this episode, May hosts Sujit Christ, Group CISO in Sri Lanka's largest conglomerate. They discuss his journey in the field, the evolving role of Governance, Risk, and Compliance (GRC), and the importance of effective communication in cybersecurity. They discuss the impact of AI on decision-making, the need for diverse backgrounds in cybersecurity, and the shift from compliance to a risk-aware culture. Sujit shares insights on implementing the Zero Trust framework and the significance of advocating for cyber safety in society. We also discuss the challenges of reporting cybersecurity incidents, the importance of building trust within the cybersecurity community, and the significance of developing local and global networks to foster collaboration and knowledge sharing. When reflecting on his journey in cybersecurity, Sujit emphasizes the passion that drives his volunteer work and the legacy he aims to create for future professionals in the field, and how he stays motivated by his commitment to the community.