Assistant General Counsel – Cybersecurity, Data Protection & AI

About the role

AIG's Data, Digital & Cyber Legal team is seeking a highly experienced Assistant General Counsel to support its global insurance business on cybersecurity, data protection and artificial intelligence matters across the Asia-Pacific region. The role acts as a trusted advisor to business, technology and risk stakeholders, supporting strategic initiatives, regulatory compliance and risk management. It reports to the International Privacy & Cyber Legal Lead (London) and is based in Singapore (100% in the office).

Key responsibilities

• Cybersecurity and technology risk: advise on incident response, ransomware, data breaches and regulatory notification obligations across APAC jurisdictions; support technology and ICT contracts such as cloud, SaaS and outsourcing; partner with IT Security and Risk teams on third-party risk management.
• Data privacy and governance: advise on data protection laws across APAC (Singapore PDPA, Hong Kong PDPO, Australia Privacy Act); support cross-border data transfers and lead or support DPIAs and risk assessments; advise on customer, employee and marketing data use; engage with regulators and internal audit.
• AI and emerging technology: advise on AI governance, accountability, transparency and bias mitigation; support responsible AI frameworks; assess legal risk of AI-enabled tools such as underwriting and claims automation; monitor emerging AI regulations.
• Commercial and strategic advisory: support digital transformation, draft and negotiate data processing, licensing and technology service agreements, and give risk-based legal advice to business leaders.
• Governance and stakeholder management: collaborate with global legal, compliance, risk and IT teams, help develop global policies, train internal stakeholders on cyber, privacy and AI risks, and manage external counsel where necessary.

Required profile

• Qualified lawyer with at least 8 years' experience in-house or in private practice in technology, data privacy and cybersecurity.
• Experience in financial services, information technology or insurance strongly preferred.
• Proven experience advising senior stakeholders across multiple APAC jurisdictions.
• Licensed or eligible to be licensed to practice in Singapore.
• Working proficiency in Mandarin and English.
• Experience in a large, fast-paced organisation during periods of significant change and transformation.

Required skills

• Strong knowledge of APAC data protection regimes, cybersecurity regulatory frameworks and emerging AI governance.
• Understanding of financial services-specific information security requirements.

What we offer

• A Total Rewards program covering health, wellbeing, financial security and professional development.
• A culture of inclusion with Employee Resource Groups and continuous learning and development.