AI-Driven GRC/IAM for Modern Enterprises

Q1. Could you start by giving us a brief overview of your professional background, particularly focusing on your expertise in the industry?

For more than twenty years, I have worked in roles focused on Governance, Risk, and Compliance (GRC), Identity and Access Management (IAM), and enterprise risk transformation. My background includes experience with global banks, Big 4 advisory firms, and leading GRC programs across multiple regulated industries. Through this work, I have seen firsthand how regulatory requirements, audit demands, and cyber-risk concerns drive technology investments. More recently, I have observed how AI is beginning to reshape these areas, creating new opportunities and challenges for organizations.

Q2. Which AI-driven GRC/IAM capabilities do you expect enterprises to invest in between 2026–2030 due to regulatory pressure, audit expectations, or cyber-risk exposure—and what spend shifts do you anticipate each to drive?

Looking ahead to the next five years, I expect organizations to focus their investments on capabilities that provide real-time assurance and predictive risk intelligence:

Continuous Control Monitoring: It is one area where I see significant change. Regulators are moving away from periodic audits and instead expect real-time compliance validation. As a result, organizations are shifting budgets from manual testing to platforms that…