Senior Manager (Data & AI Governance) - Information Technology, CEO's Office and Central Services

The Securities and Futures Commission (SFC); Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

The Securities and Futures Commission (SFC) is seeking an experienced Data & AI Governance Lead to establish, lead and oversee the day-to-day operation of the Commission’s enterprise data and AI governance capability. The role translates the Data & AI Governance Framework into a practical operating model, defining accountability, decision rights, standards, controls and assurance processes.

Working across divisions, technology and corporate functions, you will embed governance into daily

Qualifications

• 8+ years of relevant experience in Data Governance, AI Governance, Information Management, Technology Risk, Compliance or related disciplines.
• Bachelor’s or Master’s degree in data management, information systems, computer science, risk management, business or a related discipline.
• Proven experience establishing or implementing enterprise‑wide governance frameworks, operating models, policies and controls.
• Strong knowledge of data ownership, stewardship, data quality, metadata management, data lineage and information lifecycle management.
• Good understanding of responsible AI, model and agent governance, generative AI risks and controls.
• Experience applying risk‑based governance to AI use cases, including classification, approval, monitoring, incident management and ongoing review.
• Strong leadership, stakeholder‑management and influencing skills.
• Excellent judgement and ability to balance governance, regulatory expectations, operational practicality and business value.
• Strong communication skills with technical and non‑technical audiences.
• Relevant professional qualifications, such as CDMP, DCAM, CISA or CRISC, would be an advantage.
• Experience in financial services, financial regulation or another highly regulated environment would be an advantage.

Responsibilities

• Lead the implementation and continuous enhancement of the enterprise Data & AI Governance Framework, policies, standards and operating model.
• Establish clear decision rights, accountability and escalation arrangements across the Data & AI lifecycle.
• Embed effective Data Owner, Data Steward and Data Custodian responsibilities across business divisions and technology functions.
• Lead governance forums and provide reporting, insights and recommendations to senior management and governance committees.
• Integrate Data & AI governance requirements into demand management, architecture, procurement, solution delivery and operational processes.
• Establish proportionate controls covering data quality, metadata, lineage, classification, access, sharing, retention and appropriate use.
• Develop and operationalize governance arrangements for AI, machine learning, generative AI and agentic AI.
• Define practical requirements for responsible AI, human oversight, testing, transparency, monitoring, third‑party solutions and lifecycle management.
• Establish and maintain enterprise inventories for critical data assets and AI systems, including ownership, classification, risk tier, approved use, material dependencies and lifecycle status.
• Work with Information Security, Legal, Risk, Internal Audit and technology teams to ensure governance arrangements are aligned and effective.
• Monitor compliance, exceptions and material governance issues and oversee remediation and continuous improvement.
• Build a strong network of Data Owners, Data Stewards and governance practitioners across the Commission.
• Provide practical guidance, templates and tools that enable divisions to meet governance requirements efficiently.
• Promote Data & AI literacy and organizational accountability.
• Monitor regulatory, industry and technology developments and recommend enhancements to governance arrangements.
• Build a sustainable internal Data & AI governance capability.

Job description

The Securities and Futures Commission is seeking an experienced Data & AI Governance Lead to establish, lead and oversee the day-to-day operation of the Commission’s enterprise data & AI governance capability.

The role is responsible for translating the SFC’s Data & AI Governance Framework into a practical operating model encompassing accountability, decision‑making, standards, controls and assurance processes.

Working across business divisions, technology teams and corporate functions, the successful candidate will embed governance into day‑to‑day operations and enable the secure, responsible and effective use of data and AI across the Commission. This role will play a key part in supporting the SFC’s ambition to become a more data‑ and AI‑enabled regulator.

Duties & Responsibilities:

Governance Strategy and Operating Model

• Lead the implementation and continuous enhancement of the SFC’s enterprise Data & AI Governance Framework, policies, standards and operating model.

• Establish clear decision rights, accountability and escalation arrangements across the Data & AI lifecycle.

• Embed effective Data Owner, Data Steward and Data Custodian responsibilities across business divisions and technology functions.

• Lead governance forums and provide reporting, insights and recommendations to senior management and governance committees.

• Integrate Data & AI governance requirements into demand management, architecture, procurement, solution delivery and operational processes.

Data and AI Controls

• Establish proportionate controls covering data quality, metadata, lineage, classification, access, sharing, retention and appropriate use.

• Develop and operationalize governance arrangements for AI, machine learning, generative AI and agentic AI.

• Define practical requirements for responsible AI, human oversight, testing, transparency, monitoring, third‑party solutions and lifecycle management.

• Establish and maintain enterprise inventories for critical data assets and AI systems, including ownership, classification, risk tier, approved use, material dependencies and lifecycle status.

• Work with Information Security, Legal, Risk, Internal Audit and technology teams to ensure governance arrangements are aligned and effective.

• Monitor compliance, exceptions and material governance issues and oversee remediation and continuous improvement.

Enterprise Adoption and Capability

• Build a strong network of Data Owners, Data Stewards and governance practitioners across the Commission.

• Provide practical guidance, templates and tools that enable divisions to meet governance requirements efficiently.

• Promote Data & AI literacy and organizational accountability.

• Monitor regulatory, industry and technology developments and recommend enhancements to governance arrangements.

• Build a sustainable internal Data & AI governance capability.

Requirements:

• 8+ years of relevant experience in Data Governance, AI Governance, Information Management, Technology Risk, Compliance or related disciplines.

• Bachelor’s or Master’s degree in data management, information systems, computer science, risk management, business or a related discipline.

• Proven experience establishing or implementing enterprise‑wide governance frameworks, operating models, policies and controls.

• Strong knowledge of data ownership, stewardship, data quality, metadata management, data lineage and information lifecycle management.

• Good understanding of responsible AI, model and agent governance, generative AI risks and controls.

• Experience applying risk‑based governance to AI use cases, including classification, approval, monitoring, incident management and ongoing review.

• Strong leadership, stakeholder‑management and influencing skills.

• Excellent judgement and ability to balance governance, regulatory expectations, operational practicality and business value.

• Strong communication skills with technical and non‑technical audiences.

• Relevant professional qualifications, such as CDMP, DCAM, CISA or CRISC, would be an advantage.

• Experience in financial services, financial regulation or another highly regulated environment would be an advantage.

Application deadline: 30 October 2026

All applications will be handled in strict confidence by authorised personnel and will only be used for recruitment related purposes. Applicants who do not hear from us within six months from the application deadline may consider their applications as unsuccessful. All information on unsuccessful candidates will be destroyed after six months.

We are an EQUAL OPPORTUNITY EMPLOYER.