Do Auditors Have Horns?
Featuring
Vignesh Kumar
In this episode, we’re joined by Vignesh Kumar, Senior Manager of Security and Privacy at Microsoft. From engineering roots to GRC evangelist, Vignesh shares how he’s making governance less scary and more human. If you’ve ever dreaded audits, this one’s your reintroduction—minus the horns.


Do Auditors Have Horns?
Do Auditors Have Horns?
In this episode, we’re joined by Vignesh Kumar, Senior Manager of Security and Privacy at Microsoft. From engineering roots to GRC evangelist, Vignesh shares how he’s making governance less scary and more human. If you’ve ever dreaded audits, this one’s your reintroduction—minus the horns.


Description
In this episode, we walk through the journey of Vignesh Kumar, who leads the internal audit teams at Microsoft. He talks about his unorthodox journey to the GRC world, what makes GRC sexy, why relationships are pivotal in the GRC world.
He offers a peek into the world of audits, explaining how internal and external audits vary and emphasizes the need for regular internal audits.
There’s also some sneaky tips on how GRC teams can establish a rapport with other teams to make the whole process, much easier.
Tune in as he recounts amusing anecdotes of his experiences as an internal auditor and learn whether auditor do have horns or are just an angel in disguise?
Whether you’re a GRC professional or an employee who is vary of it, Vignesh will make you gain a new respect for it. Get ready to see GRC in a new light!
Highlights from the episode
- Discussing the importance of GRC for an organization’s security
- Differentiating between internal audits and external audits
- Emphasizing the importance of regular internal audits
“What I came to really appreciate about GRC was how it could positively impact my applications. Its ripple effects spread across the organization and ensure that hundreds of applications are compliant.”
About the Risk Grustlers Podcast
Risk Grustlers is a podcast for people working in security, risk, and governance who want sharper conversations than the usual industry soundbites. Each episode features CISOs, security leaders, and risk practitioners sharing how they think through the real operational challenges behind cybersecurity, compliance, AI governance, and enterprise risk.
Hosted by Aayush Ghosh Choudhury (CEO and Co-founder of Scrut Automation) and Nicholas Muy (CISO at Scrut Automation), this podcast series focuses on practical lessons, hard-earned perspectives, and the nuance that comes only from years spent in the security and compliance space.


























