GRC Engineer

Where systems thinking meets legacy GRC

⚙️ You Still Work in GRC: What GRC Engineering Is, and What It Isn't

The framework that separates GRC engineering thinking from tool requirements, and the specific actions you can take this week to advance GRC objectives

Ayoub Fandi

ComplianceCompliance

Oct 02, 2025

⚙️ The Zillow Effect in GRC: When Platforms Perform Control Testing

How GRC automation shifted from evidence storage to active control assessment, and what that means for your audit relationship and your GRC Engineering practice

Ayoub Fandi

GRC ArchitectureGRC Architecture

Sep 25, 2025

⚙️ The Three Lines of Defence, a systems-thinking approach

Why your defence lines need systems thinking and shared intelligence, not just functional independence and isolated processes, a GRC Engineering approach.

Ayoub Fandi

ComplianceCompliance

Sep 18, 2025

⚙️ Automating Quarterly Access Reviews: GRC Engineering in practice

The Step-by-Step GRC Engineering Practical Guide to Leveraging Existing IAM Infrastructure to automate Quarterly Access Reviews and get better visibility

Ayoub Fandi

GRC EngineeringGRC Engineering

Sep 10, 2025

⚙️ The GRC Engineering Implementation Framework That Works for Enterprises (no more DIY failures)

A 5-step methodology that addresses coordination challenges, leverages existing infrastructure, and delivers business value without creating the technical debt that kills most initiatives

Ayoub Fandi

Stakeholder ManagementStakeholder Management

Sep 04, 2025

⚙️ GRC Engineering isn't running parallel to security, it's running behind it

Why building parallel GRC infrastructure wastes resources, alienates teams, and fragments authority across competing systems. Also, what to do instead!

Ayoub Fandi

Deep-DiveDeep-Dive

Sep 02, 2025

🔎 Deep-Dive on Coveo's GRC Program w/ Pierre-Paul Ferland

Pierre-Paul Ferland has scaled Coveo's GRC program from startup to IPO. This deep-dive explores their technical architecture, tooling decisions, and engineering integration strategies.

Ayoub Fandi

ComplianceCompliance

Aug 28, 2025

⚙️ Why the Policy-as-Code revolution didn't happen (and what can we do?)

On the back of the news of the acquisition of the Styra team behind Open Policy Agent by Apple, we'll discuss how Policy-as-Code has been fitting into GRC Engineering and the way forward.

Ayoub Fandi

PodcastPodcast

Aug 26, 2025

🎙️ The GRC Engineering Blueprint for the Public Sector w/ Dr. Ibrahim Waziri Jr.

Insights from a leader who delivered ATOs across US Federal and worked on GRC Engineering in both the Cloud Service Provider and Consulting spaces

Ayoub Fandi

GRC EngineeringGRC Engineering

Aug 21, 2025

⚙️ GRC Engineer vs. GRC Engineering. Which one you need? Maybe both?

The 2x2 matrix that reveals why the industry is asking the wrong questions about your GRC maturity, assess if you need GRC Engineering, GRC Engineers or both.

Ayoub Fandi

GRC EngineeringGRC Engineering

Aug 14, 2025