Ayoub Fandi

Ayoub Fandi is a GRC Engineer at Lovable, an AI-native software company, where he began working in May 2026. He previously spent over four years at GitLab, most recently as Security Assurance Automation Team Lead, and before that held security and compliance roles at Salesforce. He is the founder of the GRC Engineer newsletter and podcast, where he shares frameworks for modernizing governance, risk, and compliance through automation and engineering-driven approaches. He is best known for advocating the transformation of GRC from manual, after-the-fact verification into an engineered, continuously monitored capability embedded directly into systems and workflows.