05/08/2026
I've sat in enough compliance planning meetings to notice a pattern: the conversation about modernizing monitoring or surveillance almost always ends the same way. "We'd need to hire a data scientist for that." And then it quietly dies on a headcount request.
That instinct feels responsible. But I don't think it's actually a strategy.
Here's what stood out to me digging into this:
→ 63% of employers say skill gaps are their #1 barrier to transformation
→ 53% of employees will need real upskilling by 2028 (IBM)
→ Only 34% of companies actually have a formal upskilling program in place
That last number is the real story. Everyone agrees there's a gap. Almost nobody has built the internal muscle to close it. So the default becomes recruiting, which takes months, competes against every other function hiring for the same scarce skill set, and still leaves you with someone who has to learn your regulatory environment from zero.
The part that changed my thinking: the hardest part of a compliance data role was never really the statistics. It's knowing which anomaly is a genuine red flag versus a seasonal pattern, and what "explainable" needs to mean for a specific rule in front of a specific regulator.
That judgment already lives with the compliance team you have. A new hire has to build it from scratch. Your team just has to be given the tools.
Hiring still makes sense for a narrow, time-boxed gap. But as the standing answer to every compliance modernization question, it quietly outsources the institutional knowledge that makes the whole program work.
Curious how others are thinking about this... Has your team leaned toward hiring in new skills, or building them internally? What tipped the decision?
Read more at NanoNotes:
For a decade, 'we lack the skills' has justified hiring instead of training. Here's why upskilling your compliance team beats hiring a data scientist.