Governance, Risk, and Compliance (GRC) is boring, uninspiring and bureaucratic – at least that’s what you’ve probably been told. In reality, GRC is a dynamic security discipline, which requires professionals to develop a deep understanding of their business, products, colleagues, and customers to be successful. Join Mark Graziano as he partners with incredible security champions to challenge the GRC industry stereotype and outline security career and program strategies you can implement today.

Mark Graziano

Mark has over a decade of experience in the world of Tech. 

  • Holds a Bachelor's in Computer Science & Computer Engineering

  • Got his foot in the door as an IT Help Specialist

  • Sold his soul to a Beltway Bandit (...wait, you said I'd be Red Teaming. WTF is C&A/A&A and why is this spreadsheet so ugly?!)

  • Got sick of Public Sector politics and moved to politics-free world of Private Sector consulting

  • Started/dropped out of a Cybersecurity Masters program

  • Realized the upsetting hilarity of a company selling out my "expertise" for $2000/day despite me having zero real-world internal experience

  • Joined a Start Up

  • Laid off from a Start Up

  • [PERSONAL & PROFESSIONAL CRISIS INTENSIFIES]

  • Currently working as GRC Solutions & Automation Manager @ Twilio