Director of Data, AI, and Emerging Tech Risk Oversight

Bring your perspective to challenges that matter.

At AIA, your expertise and judgement can influence how we advance our Purpose of helping millions of people live Healthier, Longer, Better Lives. Across our diverse markets, you will take on complex challenges, collaborate with talented colleagues and bring together people, ideas and insights to shape important decisions and create lasting value for our customers and communities.

Join us to shape what comes next, broaden your influence and extend your impact across Asia.

About the Role

• Lead independent second-line oversight, challenge, and assurance over Data, Artificial Intelligence, and Emerging Technology risks.
• Ensure risks are identified, assessed, managed, monitored, and reported in line with the risk framework, risk appetite, regulatory requirements, and industry best practices, including acting as a trusted advisor and subject matter expert, while also supporting Group Innovation Office risk oversight.

Roles and Responsibilities:

Data Risk Oversight

·        Lead independent second-line oversight, challenge, and assurance over data risk management practices across the Group.

·        Assess the effectiveness of governance, controls, and risk management practices relating to data quality, data governance, data lifecycle management, data privacy, data retention, and data usage.

·        Provide independent review and challenge of data risk assessments, control effectiveness, and remediation activities.

·        Monitor data-related risk exposures and identify emerging themes, systemic weaknesses, and opportunities for risk reduction.

·        Evaluate alignment of data management practices with the Group's risk appetite, risk management framework, and regulatory expectations.

Artificial Intelligence (AI) Risk Oversight

·        Lead oversight of AI and advanced analytics risks including model governance, AI accountability, human oversight, transparency, explainability, bias management, data lineage, and responsible use.

·        Review and challenge AI risk assessments, governance frameworks, controls, and monitoring mechanisms across the AI lifecycle.

·        Assess the effectiveness of controls supporting the responsible development, deployment, use, monitoring, and retirement of AI solutions.

·        Provide independent oversight of Generative AI and emerging AI capabilities to ensure risks are identified, assessed, monitored, and appropriately managed.

·        Monitor evolving regulatory expectations, industry developments, and leading practices relating to AI governance and risk management.

Emerging Technology Risk Oversight

·        Lead independent assessment of risks associated with emerging technologies, including cloud-native solutions, digital platforms, automation, distributed technologies, and other evolving technology capabilities.

·        Evaluate technology adoption initiatives and transformation programmes to ensure key risks are appropriately identified and managed.

·        Support the identification of emerging risk trends and provide forward-looking analysis of potential impacts to the Group.

·        Assess potential technology concentrations, dependencies, and strategic risks arising from changing technology landscapes.

Risk Assessments, Assurance & Thematic Reviews

·        Lead independent risk assessments, assurance reviews, deep-dive reviews, and thematic examinations across data, AI, and emerging technology risk domains.

·        Conduct horizontal reviews and read-across assessments to identify common risk themes, control gaps, and improvement opportunities across business units and technology functions.

·        Maintain a structured horizon-scanning process to identify emerging technologies, assess potential risk implications, and provide forward-looking risk insights to senior management.

·        Challenge management's remediation plans and verify that corrective actions address root causes and deliver sustainable outcomes.

·        Promote lessons learned and good practices to strengthen risk management maturity and control effectiveness.

Strategic Advisory & Governance

·        Act as a trusted advisor and subject matter expert on data, AI, and emerging technology risks while maintaining independent second-line oversight responsibilities.

·        Provide risk oversight and challenge for strategic programmes involving data transformation, AI adoption, digital innovation, and emerging technology implementation.

·        Support governance forums, management committees, and risk committees through clear and evidence-based risk assessments and recommendations.

·        Support risk oversight activities relating to Group Information Office.

Risk Reporting & Insights

·        Produce high-quality risk insights, thematic analysis, and reporting on data, AI, and emerging technology risks for senior management and governance committees.

·        Develop forward-looking views of emerging technology risks and opportunities that may impact the Group's risk profile.

·        Monitor key risk indicators, risk trends, industry developments, and external events to support proactive risk management.

·        Contribute to the continuous enhancement of technology risk methodologies, assessment tools, and oversight practices.

Stakeholder Management

·        Build effective relationships with Technology, Data, AI, Information Security, Operational Risk, Compliance, Legal, Internal Audit, and business stakeholders.

·        Influence risk outcomes through constructive challenge, credible advice, and evidence-based recommendations.

·        Facilitate consistent application of technology risk management requirements across business units and technology functions.

People Leadership

·        Lead, coach, and develop team members to build specialist expertise in data, AI, and emerging technology risk management.

·        Promote a culture of accountability, continuous improvement, collaboration, and effective challenge.

·        Ensure effective prioritisation, resource management, and capability development to support the team's objectives.

Minimum Job Requirements:

·        Bachelor's degree in Computer Science, Data Science, Information Technology, Engineering, Information Management, Risk Management, Mathematics, Statistics, or a related discipline.

·        Relevant professional certifications in technology risk, governance, audit, data management, or AI governance (e.g., CRISC, CISA, CGEIT, CDMP, AIGP or equivalent) are preferred.

·        Minimum 15 years of experience in technology risk management, data governance, data management, AI governance, technology audit, operational risk, or related fields.

·        Strong understanding of data governance, data management, information risk management, AI governance, and emerging technology risk management principle within financial services, insurance, banking, or other highly regulated industries.

·        Demonstrated experience in second-line risk oversight, assurance reviews, governance, and control assessments.

·        Experience managing risks associated with data, analytics, AI, machine learning, cloud technologies, and digital transformation initiatives.

·        Strong analytical, critical thinking, and problem-solving capabilities.

·        Ability to assess complex technology and business risks and translate them into clear, actionable insights.

·        Strong judgement and ability to operate effectively in a rapidly evolving technology environment.

·        Experience engaging with senior executives, governance committees, regulators, and external stakeholders.

·        Proven people leadership and stakeholder management experience.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.