Director - AI Compliance

Role Overview

The Director – AI Compliance is responsible for implementing and operationalizing the Group’s AI governance policies, procedures, and related governance standards. The role serves as the central point of coordination for AI risk management, compliance reviews, governance reporting, policy enforcement, audit readiness, and alignment with data privacy requirements across all AI initiatives.

Key Responsibilities

• Establish and maintain AI governance policies, procedures, templates, controls, and operating processes.
• Lead AI risk assessments, risk classification, compliance reviews, and approval workflows for AI initiatives.
• Maintain the enterprise AI risk register, approval records, and governance documentation.
• Review AI initiatives for risks relating to bias, fairness, transparency, explainability, human oversight, privacy, and security.
• Advise business units on AI governance requirements, responsible AI practices, and data privacy considerations.
• Coordinate with Legal, Internal Audit, IT Security, HR, and business stakeholders on AI governance matters.
• Support compliance with PDPO and other applicable legal, regulatory, contractual, and corporate requirements.
• Conduct third-party AI vendor governance and risk reviews, including privacy, security, and compliance assessments.
• Monitor approved AI solutions throughout their lifecycle and coordinate periodic reassessments.
• Prepare governance dashboards, risk reports, committee papers, and management updates.
• Coordinate AI Governance Committee activities, action tracking, and governance reporting.
• Support internal and external audits, regulatory reviews, and remediation activities.
• Develop and deliver AI governance, compliance, and responsible AI awareness programmes.

Qualifications & Experience

• Bachelor’s degree in Information Systems, Computer Science, Data Science, Risk Management, Information Security, Law, Compliance, or a related discipline.
• 8–12 years of experience in IT Governance, Risk Management, Internal Audit, Compliance, Cybersecurity Governance, Data Governance, Privacy, or related areas.
• Experience implementing governance frameworks, compliance programmes, risk management processes, or control environments.
• Experience in AI Governance, Responsible AI, Data Governance, Privacy, or emerging technology governance is preferred.
• Experience working with senior management, governance committees, and cross-functional stakeholders.
• Professional certifications such as CISA, CRISC, CISSP, CDPSE, CIPP, CIPM, or equivalent are advantageous.

Knowledge & Skills

• Strong understanding of AI governance, responsible AI principles, and AI risk management.
• Knowledge of generative AI, machine learning, AI agents, and enterprise AI platforms.
• Understanding of data privacy, data governance, cybersecurity, and regulatory compliance requirements.
• Excellent stakeholder management, influencing, communication, and presentation skills.
• Strong analytical, risk assessment, policy drafting, and problem-solving abilities.
• Ability to translate regulatory, governance, and risk requirements into practical business guidance.

To know more about us, please visit our website at http://www.greateagle.com.hk.

We are an equal opportunity employer and welcome applications from all qualified candidates.

Personal data collected will be treated in strict confidence and used only for recruitment-related purpose. Applicants who have not heard from us within four weeks may consider their applications unsuccessful. All personal data will be destroyed after 24 months.