As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.

Guests: Shruti (GRC Professional)

Hosts: Troy Fine, Kendra Cooley

Producer: Elliot Volkman

Runtime: ~55 minutes

Show Notes & Segments:

00:00 – Intro & Banter

Casual chatter and AI banter with the crew, including Shruti’s first ChatGPT query and a few carrot cake recipes.

09:00 – GRC’s Image Problem: Is It Just Boring?

Shruti discusses the perception problem around GRC, generational gaps in interest, and why it’s often viewed as unsexy or undervalued work.

14:30 – Reframing the Pipeline: Who Should We Be Recruiting?

The group considers alternative talent pipelines, especially mid-career professionals who better understand the strategic value of GRC.

Quote: “Maybe it’s time to come to the good side.” – Kendra

20:30 – The Role of AI and Automation: Friend or Foe?

Shruti and the hosts weigh in on how automation platforms are shaping the field—for better or worse—and whether GRC jobs are at risk of being replaced.

Quote: “I treat AI like an intern. It can do some of the work, but I’ll always check it before it leaves the building.” – Shruti

26:00 – What Should New GRC Pros Learn?

Shruti shares what she wishes she had known earlier—especially around audit practices—and the value of soft skills and continuous learning.

30:30 – Critical Thinking, Not Just Checkboxes

Why GRC professionals must retain their ability to think critically, validate automation outputs, and question assumptions.

Quote: “We are losing our ability to be critical thinkers.” – Kendra

36:00 – Does GRC Need to Be Technical Now?

Shruti unpacks how her technical background helps her talk with engineers, understand tooling, and embrace AI; arguing that technical fluency is becoming essential.

44:30 – Final Thoughts: Risk Culture, Knowledge Transfer, and the Future

The group reflects on the need to pass down GRC fundamentals, resist overreliance on AI, and target new demographics for hiring.

Hosted on Acast. See acast.com/privacy for more information.