Assistant General Counsel – Data, Digital & Cyber Legal

About the role

AIG’s Data, Digital & Cyber Legal team is looking for a highly experienced Assistant General Counsel to support the global insurance business on cybersecurity, data protection and artificial intelligence matters across the Asia‑Pacific region. The role will act as a trusted advisor to business, technology and risk stakeholders, helping shape data governance, cyber‑resilience and responsible AI deployment.

Key responsibilities

• Advise on cybersecurity legal risks, including incident response, ransomware, data breaches and regulatory notification obligations across APAC jurisdictions.
• Support development and negotiation of technology and ICT contracts such as cloud, SaaS, outsourcing and cybersecurity services.
• Provide legal input into cyber‑resilience frameworks and align them with global regulatory standards (e.g., MAS TRM, APRA CPS 234, HKMA requirements).
• Partner with IT Security and Risk teams on third‑party risk management and critical vendor assessments.
• Offer expert advice on data protection laws across APAC, including Singapore PDPA, Hong Kong PDPO, Australia Privacy Act and emerging regimes.
• Support cross‑border data transfer strategies, localisation requirements and intra‑group arrangements.
• Lead or support data protection impact assessments (DPIAs) and risk assessments for high‑risk processing activities.
• Advise on legal and regulatory issues related to AI deployment, governance, accountability, transparency and bias mitigation.
• Develop responsible AI frameworks, policies and internal guidance, and conduct legal risk assessments for AI‑enabled tools.
• Provide legal support for digital transformation initiatives, including cloud adoption and data‑driven business models.

Required profile

• Qualified lawyer with extensive experience in cybersecurity, data protection and emerging technology law.
• Demonstrated ability to advise senior business, technology and risk stakeholders in a multinational insurance environment.
• Strong understanding of APAC regulatory regimes and experience handling cross‑border data issues.
• Proven track record of drafting and negotiating complex technology contracts.
• Experience shaping AI governance and responsible AI policies.

Required skills