AI Talent Shortage: A Global Challenge for Governance

The Global Talent Shortage in Cybersecurity and AI

The global talent shortage in the fields of cybersecurity and artificial intelligence (AI) governance has reached critical levels. According to ISC2, there are over 4.7 million vacant positions in cybersecurity in 2024, posing a major risk to technological advancement. The World Economic Forum views this situation as one of the most pressing global threats, as available skills are not progressing at the same pace as technologies.

Companies, while utilizing similar cloud platforms and AI models, face varying levels of risk depending on the markets. These variations are due to factors such as local regulations, talent mobility, training, and business maturity. The shortage of skills in cybersecurity and AI governance is not uniform and directly affects the secure deployment of AI.

The Impact of the Scarcity of Multidisciplinary Experts

AI governance is a complex discipline that requires skills in AI engineering, data management, cybersecurity, regulation, and ethics. This scarcity of talent is particularly concerning as professionals must understand how AI models work, identify their vulnerabilities to attacks, and comply with regulatory requirements.

According to the World Economic Forum, despite the rapid growth of roles related to AI governance, most companies assign these responsibilities to existing teams, such as those in security, legal, or compliance, rather than creating dedicated teams. The geographical context then becomes crucial, as the level of risk associated with this approach heavily depends on the location.

Europe, United States, China: A Global Competition for AI Talent

Europe, with its robust regulatory framework including GDPR, the NIS 2 Directive, and the EU AI Act, faces a skills shortage that remains a major obstacle. There is a lack of between 250,000 and 500,000 experts who combine technical expertise with an understanding of regulatory issues to implement these rules. Even aware of the necessary measures, companies struggle to find these profiles, particularly in countries like Spain, where AI adoption is accelerating while experienced talent remains scarce.

The talent shortage is not limited to Europe. In the United States, the demand for AI and cybersecurity experts far exceeds supply, placing significant pressure on experienced profiles. In China, national AI strategies are progressing faster than the availability of multidisciplinary talent.

Despite very different regulatory and economic contexts, the challenge remains the same: the insufficiency of skills to manage AI safely represents a strategic risk on a global scale. It is crucial for companies to anticipate these constraints, adapt their recruitment and training strategies, and consider flexible, geographically targeted approaches to reduce their exposure to risks.

Anticipating the Talent Shortage

Rather than relying on the rapid availability of experts, companies can rethink AI governance as an integrated system, rather than a single role. Responsibilities are distributed among cybersecurity, data, legal, risk, and implementation tailored to local and regulatory realities. This reduces dependence on hard-to-move talent and ensures effective oversight. Thus, the central question becomes not "How do we recruit more experts?" but "How do we operate effectively when they are scarce?"

The uneven distribution of skills worldwide makes the geographical dimension a strategic risk factor: some regions lack technical expertise, while others lack regulatory experience, complicating AI deployment. To address this, companies can diversify their international recruitment, train multidisciplinary teams, and create structures dedicated to governance. Coupled with flexible strategies tailored to each market, these approaches help reduce exposure to risks and ensure a controlled and responsible adoption of AI.