Mihai Grad

Background

About Mihai Grad

I am a cyber security governance leader with over 15 years of experience designing, transforming, and leading cyber Governance, Risk, and Compliance (GRC) capabilities for global organisations in highly regulated environments. I am passionate about directing data-informed, technology-enabled teams that leverage automation and risk intelligence to enhance security postures while streamlining workflows. My core focus is creating efficient, pragmatic, and scalable GRC solutions that securely align with strategic business objectives. Throughout my career, I have built GRC functions from the ground up, established continuous risk and assurance programs, and implemented robust third-party risk management processes. I bring deep technical expertise across frameworks such as NIST CSF, ISO 27001, PCI DSS, and GDPR, enabling organisations to effectively manage cyber risk and maintain regulatory excellence. As cyber threats and regulatory expectations evolve, I truly believe in advancing cyber GRC through the application of automation, data insights and advanced analytics. By integrating artificial intelligence and automated workflow modelling into traditional frameworks, GRC can transition from periodic compliance activities to dynamic, evidence-based governance that delivers measurable business value.