Leading from the Inside Out: What Authentic Leadership Really Means for GRC

There is a finding from Bill George's Authentic Leadership: Rediscovering the Secrets to Creating Lasting Value (2003, Jossey-Bass) that I come back to often in my work with GRC leaders. The research, conducted with Peter Sims, Andrew McLean, and Diana Mayer and written up in the HBR article "Discovering Your Authentic Leadership," set out to identify the common characteristics of great leaders. After interviews with 125 senior leaders across industries, the team came back with a conclusion I find both reassuring and instructive: they could not find any.

Leadership does not work like that. What the research found instead was that effective leaders drew on their own life story, consciously and unconsciously, to shape how they led across governance, risk, and compliance functions and beyond. The experiences they had accumulated, the formative moments they carried with them, the values those experiences had produced: these became the source of their purpose, the anchor for their decision-making, and the foundation for the risks they were willing to take in service of what they believed was right. They led from that, not from a model they had studied and replicated.

And when I ask the GRC leaders I work with a different kind of question, not about their programme or their Book of Work, but about what their leadership actually stands for and where their own values sit, many find it harder to answer than you might expect. Strong frameworks, comprehensive programmes, well-managed regulatory relationships. The execution is often very good. But the bigger picture, the sense of what they are building toward and why it matters, is often unclear or unspoken. That is a different problem from capability, and it requires a different response. The most durable leadership does not come from emulating someone else's approach. It comes from understanding your own.

Not a soft idea

For governance, risk, and compliance leaders, this finding has specific weight. The work is, at its core, values-based. We are not simply asking people to follow rules. We are asking them to hold the line on conduct, to speak up when something is wrong, and to be fit and proper not just in the technical sense but in the deeper sense of operating with integrity when it is difficult. That is not a procedural obligation. It is a values one.

Which means the leaders setting that tone need to be clear about where their own values sit. In my experience, the GRC leaders who carry the most genuine influence across their organisations are the ones for whom there is real alignment between what they say matters and how they actually lead. That alignment is visible. People sense it. And it is the foundation of the kind of trust that allows a GRC leader to have real conversations with the business, rather than being managed around.

Personal agency, the capacity to lead from your own values with intention, is where I see the most significant shift in the leaders I work with. It does not come from a framework or a model. It comes from knowing what you stand for clearly enough that the position holds when the pressure comes on.

The integrated life

One of the things the research surfaces is that authentic leaders tend to have what might be described as an integrated life. Their values and sense of purpose are not compartmentalised or separate from their work. They run through it. The work becomes an expression of something they genuinely believe in, rather than a role they occupy.

In the coaching room, this is one of the most visible markers of a GRC leader who is operating from a sustainable foundation. The leaders I work with are almost without exception technically excellent. But the ones who thrive over the long term are the ones for whom the work connects to something they actually care about: accountability, ethical conduct, and the integrity of the institutions and markets they operate within. That connection is visible to the people around them. It shapes how they show up in difficult conversations, how they make decisions under pressure, and how their teams experience their leadership.

The cost of leading from conviction

The research also found something that is easy to deprioritise: authentic leaders accept that acting on their values can carry real personal risk. In GRC, the pressure points are specific.

A leader who is genuinely leading from their values might find themselves escalating a concern the business does not want escalated. Declining to sign off on something that technically passes a threshold but not the smell test. Telling a senior stakeholder something they do not want to hear, and holding that position when pushed back on. Recommending a remediation that will cost the business money or delay a product launch. None of those are comfortable positions. In some institutional cultures, they carry genuine career risk.

In the coaching room, I find that the leaders who navigate this well are not the ones who are fearless. Very few people are genuinely fearless. They are the ones who are grounded enough in their own values that they can hold their position without it becoming a confrontation of ego. They know why they are doing what they are doing. That clarity gives them a steadiness under pressure that leaders operating from a learned script, or from fear of the consequences, simply do not have.

Authentic leadership in GRC is not the same as being the person who always says no or who is known for being difficult. The leaders I see doing this well maintain genuine relationships across the business. They are trusted precisely because people know where they stand. Their authenticity is not an obstacle to their effectiveness. It is, in practice, the foundation of it.

The question worth sitting with is a simple one: when you look at how you actually lead day to day, is there genuine alignment between the values you hold and how you show up? Where there is alignment, that is a foundation to build from. Where there is a gap, that is worth understanding. The gap is not usually a character failing. It is most often a sign that the pressures of the role have, incrementally, nudged someone away from what they actually believe.

Bringing that back into focus is, in my experience, where the most durable leadership transformation begins.