EP106 GRC in the Age of AI Agents: More Complexity, More Opportunity

Patrick O’Boyle explains that the GRC “talent gap” is less about knowledge and more about adapting to automation and modern tools. • The biggest divide in GRC today is between professionals using manual processes (like spreadsheets) and those leveraging automation platforms. • Generative AI tools have significantly lowered the barrier to entry for coding and automation, making technical skills more accessible. • Upskilling in GRC now requires hands-on experimentation—similar to how SOC analysts build home labs to learn. • Automation is not reducing workloads—instead, it is expanding responsibilities and creating new, more complex tasks. • The rise of AI agents introduces new governance challenges, including risk management, observability, and system alignment. • Future GRC professionals will need stronger curiosity, adaptability, and a willingness to become more technical. • Increased productivity from AI tools is contributing to burnout, as professionals take on more work rather than less. • Effective hiring requires clear, focused job descriptions and resisting the urge to hire quickly instead of hiring the best candidate. • Long-term success in GRC will depend on continuous learning, experimentation, and building teams that avoid burnout by not operating too lean. You can find Patrick on LinkedIn here:   / patrickhoboyle