How does a software engineer become a GRC leader? In this episode of Security & GRC Decoded, host Raj Krishnamurthy welcomes Varun Gurnaney, Staff Security Engineer at Apple. Varun shares his journey from writing janky Python scripts for compliance evidence collection to shaping the discipline of GRC engineering at some of the world’s biggest companies.
He discusses the cultural and technical gaps between security, engineering, GRC, and audit — and how automation can bridge them. From building one control really well to proving value through audit automation, Varun lays out why the GRC space is hotter than ever. This conversation is a must-listen for anyone navigating compliance at scale.
🔑 5 Key Takeaways
- Compliance ≠ Security: Passing audits is not enough — engineering-driven GRC is the future.
- Start Small: Automate one control well to prove value before scaling automation.
- Bridging Teams: Cultural friction between engineering, security, GRC, and audit is real — empathy and communication reduce the pain.
- Audit Anxiety: Audit automation is about reducing anxiety and toil as much as passing audits.
- GRC Engineering is a Discipline: Whether it lives inside GRC or security, automation is now essential.
📚 What You’ll Learn
- How Varun transitioned from software engineering into GRC leadership
- Why compliance automation looks different for SMBs, mid-market, and enterprises
- The technical and cultural blockers between engineering and GRC
- Practical strategies for proving automation value internally
- How generative AI and coding agents will shape audit and compliance automation
This podcast is brought to you by ComplianceCow — the smarter way to manage compliance. Automate evidence collection, eliminate screenshots, and scale your program with confidence.
📺 Watch more episodes and learn from top leaders in the GRC space!
Connect With Our Guest:
Varun Gurnaney | Staff Security Engineer | Apple
Rate, review, and share if you enjoyed the show!
Subscribe to Security & GRC Decoded wherever you get your podcasts:
Popular Podcasts
Hey Jonas!
Hey Jonas! The official Jonas Brothers podcast. Hosted by Kevin, Joe, and Nick Jonas. It’s the Jonas Brothers you know... musicians, actors, and well, yes, brothers. Now, they’re sharing another side of themselves in the playful, intimate, and irreverent way only they can. Spend time with the Jonas Brothers here and stay a little bit longer for deep conversations like never before.
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com