# Second-Line Oversight Specialist - Data, Artificial Intelligence, and Emerging Technology Risks **Company**: AIA **Location**: Hong Kong **Experience**: senior **Job type**: full-time **Category**: Insurance **Industry**: Insurance **Wikidata**: https://www.wikidata.org/wiki/Q30255387 **Apply**: https://aia.wd3.myworkdayjobs.com/en-US/External/job/Hong-Kong-HK-AIA-Group-Office/Director-of-Data--AI--and-Emerging-Tech-Risk-Oversight_JR-71709?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_f1eb6a05-8cd ## Description We are seeking a Second-Line Oversight Specialist to lead independent second-line oversight, challenge, and assurance over Data, Artificial Intelligence, and Emerging Technology risks. **About the Role** As a Second-Line Oversight Specialist, you will play a crucial role in ensuring that risks are identified, assessed, managed, monitored, and reported in line with the risk framework, risk appetite, regulatory requirements, and industry best practices. **Responsibilities** ### Data Risk Oversight - Lead independent second-line oversight, challenge, and assurance over data risk management practices across the Group. - Assess the effectiveness of governance, controls, and risk management practices relating to data quality, data governance, data lifecycle management, data privacy, data retention, and data usage. - Provide independent review and challenge of data risk assessments, control effectiveness, and remediation activities. - Monitor data-related risk exposures and identify emerging themes, systemic weaknesses, and opportunities for risk reduction. - Evaluate alignment of data management practices with the Group's risk appetite, risk management framework, and regulatory expectations. ### Artificial Intelligence (AI) Risk Oversight - Lead oversight of AI and advanced analytics risks including model governance, AI accountability, human oversight, transparency, explainability, bias management, data lineage, and responsible use. - Review and challenge AI risk assessments, governance frameworks, controls, and monitoring mechanisms across the AI lifecycle. - Assess the effectiveness of controls supporting the responsible development, deployment, use, monitoring, and retirement of AI solutions. - Provide independent oversight of Generative AI and emerging AI capabilities to ensure risks are identified, assessed, monitored, and appropriately managed. - Monitor evolving regulatory expectations, industry developments, and leading practices relating to AI governance and risk management. ### Emerging Technology Risk Oversight - Lead independent assessment of risks associated with emerging technologies, including cloud-native solutions, digital platforms, automation, distributed technologies, and other evolving technology capabilities. - Evaluate technology adoption initiatives and transformation programmes to ensure key risks are appropriately identified and managed. - Support the identification of emerging risk trends and provide forward-looking analysis of potential impacts to the Group. - Assess potential technology concentrations, dependencies, and strategic risks arising from changing technology landscapes. ### Risk Assessments, Assurance & Thematic Reviews - Lead independent risk assessments, assurance reviews, deep-dive reviews, and thematic examinations across data, AI, and emerging technology risk domains. - Conduct horizontal reviews and read-across assessments to identify common risk themes, control gaps, and improvement opportunities across business units and technology functions. - Maintain a structured horizon-scanning process to identify emerging technologies, assess potential risk implications, and provide forward-looking risk insights to senior management. - Challenge management's remediation plans and verify that corrective actions address root causes and deliver sustainable outcomes. - Promote lessons learned and good practices to strengthen risk management maturity and control effectiveness. ### Strategic Advisory & Governance - Act as a trusted advisor and subject matter expert on data, AI, and emerging technology risks while maintaining independent second-line oversight responsibilities. - Provide risk oversight and challenge for strategic programmes involving data transformation, AI adoption, digital innovation, and emerging technology implementation. - Support governance forums, management committees, and risk committees through clear and evidence-based risk assessments and recommendations. - Support risk oversight activities relating to Group Information Office. ### Risk Reporting & Insights - Produce high-quality risk insights, thematic analysis, and reporting on data, AI, and emerging technology risks for senior management and governance committees. - Develop forward-looking views of emerging technology risks and opportunities that may impact the Group's risk profile. - Monitor key risk indicators, risk trends, industry developments, and external events to support proactive risk management. - Contribute to the continuous enhancement of technology risk methodologies, assessment tools, and oversight practices. ### Stakeholder Management - Build effective relationships with Technology, Data, AI, Information Security, Operational Risk, Compliance, Legal, Internal Audit, and business stakeholders. - Influence risk outcomes through constructive challenge, credible advice, and evidence-based recommendations. - Facilitate consistent application of technology risk management requirements across business units and technology functions. ### People Leadership - Lead, coach, and develop team members to build specialist expertise in data, AI, and emerging technology risk management. - Promote a culture of accountability, continuous improvement, collaboration, and effective challenge. - Ensure effective prioritisation, resource management, and capability development to support the team's objectives. **Requirements** - Bachelor's degree in Computer Science, Data Science, Information Technology, Engineering, Information Management, Risk Management, Mathematics, Statistics, or a related discipline. - Relevant professional certifications in technology risk, governance, audit, data management, or AI governance (e.g., CRISC, CISA, CGEIT, CDMP, AIGP or equivalent) are preferred. - Minimum 15 years of experience in technology risk management, data governance, data management, AI governance, technology audit, operational risk, or related fields. - Strong understanding of data governance, data management, information risk management, AI governance, and emerging technology risk management principles within financial services, insurance, banking, or other highly regulated industries. - Demonstrated experience in second-line risk oversight, assurance reviews, governance, and control assessments. - Experience managing risks associated with data, analytics, AI, machine learning, cloud technologies, and digital transformation initiatives. - Strong analytical, critical thinking, and problem-solving capabilities. - Ability to assess complex technology and business risks and translate them into clear, actionable insights. - Strong judgement and ability to operate effectively in a rapidly evolving technology environment. - Experience engaging with senior executives, governance committees, regulators, and external stakeholders. - Proven people leadership and stakeholder management experience. ## Skills ### Required - data governance - data management - AI governance - risk management - technology risk management ### Nice to have - CRISC - CISA - CGEIT - CDMP - AIGP --- Source: [Apply at aia.wd3.myworkdayjobs.com](https://aia.wd3.myworkdayjobs.com/en-US/External/job/Hong-Kong-HK-AIA-Group-Office/Director-of-Data--AI--and-Emerging-Tech-Risk-Oversight_JR-71709?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)