Director of Data, AI, and Emerging Tech Risk Oversight

Bring your perspective to challenges that matter.

About the Role

. Lead independent second-line oversight, challenge, and assurance over Data, Artificial Intelligence, and Emerging Technology risks.
. Ensure risks are identified, assessed, managed, monitored, and reported in line with the risk framework, risk appetite, regulatory requirements, and industry best practices, including acting as a trusted advisor and subject matter expert, while also supporting Group Innovation Office risk oversight.

Roles and Responsibilities:

Data Risk Oversight

. Lead independent second-line oversight, challenge, and assurance over data risk management practices across the Group.

. Assess the effectiveness of governance, controls, and risk management practices relating to data quality, data governance, data lifecycle management, data privacy, data retention, and data usage.

. Provide independent review and challenge of data risk assessments, control effectiveness, and remediation activities.

. Monitor data-related risk exposures and identify emerging themes, systemic weaknesses, and opportunities for risk reduction.

. Evaluate alignment of data management practices with the Group's risk appetite, risk management framework, and regulatory expectations.

Artificial Intelligence (AI) Risk Oversight

. Lead oversight of AI and advanced analytics risks including model governance, AI accountability, human oversight, transparency, explainability, bias management, data lineage, and responsible use.

. Review and challenge AI risk assessments, governance frameworks, controls, and monitoring mechanisms across the AI lifecycle.

. Assess the effectiveness of controls supporting the responsible development, deployment, use, monitoring, and retirement of AI solutions.

. Provide independent oversight of Generative AI and emerging AI capabilities to ensure risks are identified, assessed, monitored, and appropriately managed.

. Monitor evolving regulatory expectations, industry developments, and leading practices relating to AI governance and risk management.

Emerging Technology Risk Oversight

. Lead independent assessment of risks associated with emerging technologies, including cloud-native solutions, digital platforms, automation, distributed technologies, and other evolving technology capabilities.

. Evaluate technology adoption initiatives and transformation programmes to ensure key risks are appropriately identified and managed.

. Support the identification of emerging risk trends and provide forward-looking analysis of potential impacts to the Group.

. Assess potential technology concentrations, dependencies, and strategic risks arising from changing technology landscapes.

Risk Assessments, Assurance & Thematic Reviews

. Lead independent risk assessments, assurance reviews, deep-dive reviews, and thematic examinations across data, AI, and emerging technology risk domains.

. Conduct horizontal reviews and read-across assessments to identify common risk themes, control gaps, and improvement opportunities across business units and technology functions.

. Maintain a structured horizon-scanning process to identify emerging technologies, assess potential risk implications, and provide forward-looking risk insights to senior management.

. Challenge management's remediation plans and verify that corrective actions address root causes and deliver sustainable outcomes.

. Promote lessons learned and good practices to strengthen risk management maturity and control effectiveness.

Strategic Advisory & Governance

. Act as a trusted advisor and subject matter expert on data, AI, and emerging technology risks while maintaining independent second-line oversight responsibilities.

. Provide risk oversight and challenge for strategic programmes involving data transformation, AI adoption, digital innovation, and emerging technology implementation.

. Support governance forums, management committees, and risk committees through clear and evidence-based risk assessments and recommendations.

. Support risk oversight activities relating to Group Information Office.

Risk Reporting & Insights

. Produce high-quality risk insights, thematic analysis, and reporting on data, AI, and emerging technology risks for senior management and governance committees.

. Develop forward-looking views of emerging technology risks and opportunities that may impact the Group's risk profile.

. Monitor key risk indicators, risk trends, industry developments, and external events to support proactive risk management.

. Contribute to the continuous enhancement of technology risk methodologies, assessment tools, and oversight practices.

Stakeholder Management

. Build effective relationships with Technology, Data, AI, Information Security, Operational Risk, Compliance, Legal, Internal Audit, and business stakeholders.

. Influence risk outcomes through constructive challenge, credible advice, and evidence-based recommendations.

. Facilitate consistent application of technology risk management requirements across business units and technology functions.

People Leadership

. Lead, coach, and develop team members to build specialist expertise in data, AI, and emerging technology risk management.

. Promote a culture of accountability, continuous improvement, collaboration, and effective challenge.

. Ensure effective prioritisation, resource management, and capability development to support the team's objectives.

Minimum Job Requirements:

. Bachelor's degree in Computer Science, Data Science, Information Technology, Engineering, Information Management, Risk Management, Mathematics, Statistics, or a related discipline.

. Relevant professional certifications in technology risk, governance, audit, data management, or AI governance (e.g., CRISC, CISA, CGEIT, CDMP, AIGP or equivalent) are preferred.

. Minimum 15 years of experience in technology risk management, data governance, data management, AI governance, technology audit, operational risk, or related fields.

. Strong understanding of data governance, data management, information risk management, AI governance, and emerging technology risk management principle within financial services, insurance, banking, or other highly regulated industries.

. Demonstrated experience in second-line risk oversight, assurance reviews, governance, and control assessments.

. Experience managing risks associated with data, analytics, AI, machine learning, cloud technologies, and digital transformation initiatives.

. Strong analytical, critical thinking, and problem-solving capabilities.

. Ability to assess complex technology and business risks and translate them into clear, actionable insights.

. Strong judgement and ability to operate effectively in a rapidly evolving technology environment.

. Experience engaging with senior executives, governance committees, regulators, and external stakeholders.

. Proven people leadership and stakeholder management experience.