Director – AI Compliance

Great Eagle Holdings Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Great Eagle Holdings Limited seeks a Director – AI Compliance to implement and operationalize AI governance policies and drive enterprise risk management across all AI initiatives. You will coordinate governance activities, ensure privacy compliance, and report to leadership on risk and control effectiveness.

The role requires leadership of cross-functional teams, strong auditing acumen, and deep knowledge of PDPO and data privacy. This is a senior, strategic position in Hong Kong.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Data Science, Risk Management, Information Security, Law or Compliance.
• 8–12 years of experience in IT Governance, Risk Management, Internal Audit, Compliance, Cybersecurity Governance, Data Governance or Privacy.
• Experience implementing governance frameworks, compliance programmes, risk management processes, or control environments.
• Experience in AI Governance, Responsible AI, Data Governance, Privacy, or emerging technology governance preferred.
• Experience working with senior management, governance committees, and cross-functional stakeholders.
• Professional certifications such as CISA, CRISC, CISSP, CDPSE, CIPP, CIPM, or equivalent are advantageous.

Responsibilities

• Establish and maintain AI governance policies, procedures, templates, controls, and operating processes.
• Lead AI risk assessments, risk classification, compliance reviews, and approval workflows for AI initiatives.
• Maintain the enterprise AI risk register, approval records, and governance documentation.
• Review AI initiatives for risks relating to bias, fairness, transparency, explainability, human oversight, privacy, and security.
• Advise business units on AI governance requirements, responsible AI practices, and data privacy considerations.
• Coordinate with Legal, Internal Audit, IT Security, HR, and business stakeholders on AI governance matters.
• Support compliance with PDPO and other applicable legal, regulatory, contractual, and corporate requirements.
• Conduct third-party AI vendor governance and risk reviews, including privacy, security, and compliance assessments.
• Monitor approved AI solutions throughout their lifecycle and coordinate periodic reassessments.
• Prepare governance dashboards, risk reports, committee papers, and management updates.
• Coordinate AI Governance Committee activities, action tracking, and governance reporting.
• Support internal and external audits, regulatory reviews, and remediation activities.
• Develop and deliver AI governance, compliance, and responsible AI awareness programmes.

Skills

AI governance

Risk management

Stakeholder management

Communication

Problem solving

Regulatory compliance

Education

Bachelor's degree in Information Systems, Computer Science, Data Science, Risk Management, Information Security, Law, Compliance

Tools

CISA

CRISC

CISSP

CDPSE

CIPP

CIPM

Job description

The Director – AI Compliance is responsible for implementing and operationalizing the Group’s AI governance policies, procedures, and related governance standards. The role serves as the central point of coordination for AI risk management, compliance reviews, governance reporting, policy enforcement, audit readiness, and alignment with data privacy requirements across all AI initiatives.

Key Responsibilities

• Establish and maintain AI governance policies, procedures, templates, controls, and operating processes.
• Lead AI risk assessments, risk classification, compliance reviews, and approval workflows for AI initiatives.
• Maintain the enterprise AI risk register, approval records, and governance documentation.
• Review AI initiatives for risks relating to bias, fairness, transparency, explainability, human oversight, privacy, and security.
• Advise business units on AI governance requirements, responsible AI practices, and data privacy considerations.
• Coordinate with Legal, Internal Audit, IT Security, HR, and business stakeholders on AI governance matters.
• Support compliance with PDPO and other applicable legal, regulatory, contractual, and corporate requirements.
• Conduct third-party AI vendor governance and risk reviews, including privacy, security, and compliance assessments.
• Monitor approved AI solutions throughout their lifecycle and coordinate periodic reassessments.
• Prepare governance dashboards, risk reports, committee papers, and management updates.
• Coordinate AI Governance Committee activities, action tracking, and governance reporting.
• Support internal and external audits, regulatory reviews, and remediation activities.
• Develop and deliver AI governance, compliance, and responsible AI awareness programmes.

Qualifications & Experience

• Bachelor’s degree in Information Systems, Computer Science, Data Science, Risk Management, Information Security, Law, Compliance, or a related discipline.
• 8–12 years of experience in IT Governance, Risk Management, Internal Audit, Compliance, Cybersecurity Governance, Data Governance, Privacy, or related areas.
• Experience implementing governance frameworks, compliance programmes, risk management processes, or control environments.
• Experience in AI Governance, Responsible AI, Data Governance, Privacy, or emerging technology governance is preferred.
• Experience working with senior management, governance committees, and cross-functional stakeholders.
• Professional certifications such as CISA, CRISC, CISSP, CDPSE, CIPP, CIPM, or equivalent are advantageous.

Knowledge & Skills

• Strong understanding of AI governance, responsible AI principles, and AI risk management.
• Knowledge of generative AI, machine learning, AI agents, and enterprise AI platforms.
• Understanding of data privacy, data governance, cybersecurity, and regulatory compliance requirements.
• Excellent stakeholder management, influencing, communication, and presentation skills.
• Strong analytical, risk assessment, policy drafting, and problem-solving abilities.
• Ability to translate regulatory, governance, and risk requirements into practical business guidance.

To know more about us, please visit our website at http://www.greateagle.com.hk.

We are an equal opportunity employer and welcome applications from all qualified candidates.

Personal data collected will be treated in strict confidence and used only for recruitment-related purpose. Applicants who have not heard from us within four weeks may consider their applications unsuccessful. All personal data will be destroyed after 24 months.