Data & AI Governance Lead — Enterprise Controls

The Securities and Futures Commission (SFC); Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

The Securities and Futures Commission (SFC) is seeking an experienced Data & AI Governance Lead to establish, lead and oversee the day-to-day operation of the Commission’s enterprise data and AI governance capability. The role translates the Data & AI Governance Framework into a practical operating model, defining accountability, decision rights, standards, controls and assurance processes.

Working across divisions, technology and corporate functions, you will embed governance into daily

Qualifications

• 8+ years of relevant experience in Data Governance, AI Governance, Information Management, Technology Risk, Compliance or related disciplines.
• Bachelor’s or Master’s degree in data management, information systems, computer science, risk management, business or a related discipline.
• Proven experience establishing or implementing enterprise‑wide governance frameworks, operating models, policies and controls.
• Strong knowledge of data ownership, stewardship, data quality, metadata management, data lineage and information lifecycle management.
• Good understanding of responsible AI, model and agent governance, generative AI risks and controls.
• Experience applying risk‑based governance to AI use cases, including classification, approval, monitoring, incident management and ongoing review.
• Strong leadership, stakeholder‑management and influencing skills.
• Excellent judgement and ability to balance governance, regulatory expectations, operational practicality and business value.
• Strong communication skills with technical and non‑technical audiences.
• Relevant professional qualifications, such as CDMP, DCAM, CISA or CRISC, would be an advantage.
• Experience in financial services, financial regulation or another highly regulated environment would be an advantage.

Responsibilities

• Lead the implementation and continuous enhancement of the enterprise Data & AI Governance Framework, policies, standards and operating model.
• Establish clear decision rights, accountability and escalation arrangements across the Data & AI lifecycle.
• Embed effective Data Owner, Data Steward and Data Custodian responsibilities across business divisions and technology functions.
• Lead governance forums and provide reporting, insights and recommendations to senior management and governance committees.
• Integrate Data & AI governance requirements into demand management, architecture, procurement, solution delivery and operational processes.
• Establish proportionate controls covering data quality, metadata, lineage, classification, access, sharing, retention and appropriate use.
• Develop and operationalize governance arrangements for AI, machine learning, generative AI and agentic AI.
• Define practical requirements for responsible AI, human oversight, testing, transparency, monitoring, third‑party solutions and lifecycle management.
• Establish and maintain enterprise inventories for critical data assets and AI systems, including ownership, classification, risk tier, approved use, material dependencies and lifecycle status.
• Work with Information Security, Legal, Risk, Internal Audit and technology teams to ensure governance arrangements are aligned and effective.
• Monitor compliance, exceptions and material governance issues and oversee remediation and continuous improvement.
• Build a strong network of Data Owners, Data Stewards and governance practitioners across the Commission.
• Provide practical guidance, templates and tools that enable divisions to meet governance requirements efficiently.
• Promote Data & AI literacy and organizational accountability.
• Monitor regulatory, industry and technology developments and recommend enhancements to governance arrangements.
• Build a sustainable internal Data & AI governance capability.

Job description

The Securities and Futures Commission (SFC) is seeking an experienced Data & AI Governance Lead to establish, lead and oversee the day-to-day operation of the Commission’s enterprise data and AI governance capability. The role translates the Data & AI Governance Framework into a practical operating model, defining accountability, decision rights, standards, controls and assurance processes.

Working across divisions, technology and corporate functions, you will embed governance into daily