Director, IT & Data Governance

About Mandarin Oriental

Mandarin Oriental is the award-winning owner and operator of some of the most luxurious hotels, resorts and residences located in prime destinations around the world, with a strong development pipeline. Increasingly recognised for creating some of the world’s most sought-after properties, the Group provides legendary service inspired by Asian heritage whilst representing the very cutting-edge of luxury experiences.

The Role of Director, IT & Data Governance

Based at the Mandarin Oriental Corporate Office in Hong Kong, the Director, IT & Data Governance is responsible for owning the IT governance framework across the entire IT department and spearheading enterprise data governance efforts in collaboration with the Data, Analytics & AI team. This role ensures all IT activities and data management practices comply with established policies, risk management practices, and regulatory requirements. The Director reports to the Vice President, IT Programs & Governance.

Key Responsibilities:

• Governance Framework & Policy Leadership: Design, implement, and enforce comprehensive IT governance frameworks, including policy development, stage-gate reviews, and quality assurance.
• Data Governance & CoE Leadership: Lead enterprise data governance by managing policies, standards, and stewardship processes; chair the Data Governance Council to drive data standardization and accountability.
• IT Risk Management: Establish and maintain a comprehensive IT risk management framework; identify, assess, and mitigate risks; maintain a consolidated risk register; and facilitate recurring risk review meetings.
• Regulatory Compliance & Audit Management: Ensure IT activities align with data privacy laws and cybersecurity requirements; manage audits and address findings.
• IT Governance Council Facilitation: Coordinate council activities, prepare briefing materials, and communicate decisions to relevant teams.
• Strategic Planning & Continuous Improvement: Contribute to IT and data governance strategy and lead initiatives to refine frameworks and promote best practices.

What We Expect:

• Bachelor’s degree in Information Systems, Computer Science, Business Administration, or related field (Master’s preferred).
• Professional certifications such as CGEIT, COBIT, ITIL, CRISC, CISSP, or DAMA CDMP highly desirable.
• Minimum 8 years in IT governance, risk management, and compliance, including leadership roles.
• Strong knowledge of IT and data governance frameworks (COBIT, ITIL, DMBOK), information security standards (ISO 27001, NIST), and data protection laws (GDPR, PIPL).
• Exceptional analytical, audit, and communication skills; ability to lead through influence and engage diverse stakeholders.
• Strategic vision with proactive anticipation of emerging technologies and governance needs.

Our Commitment to You:

• Learning & Development: Unique programmes to support your growth at every stage of your career.
• MOstay: Complimentary nights and attractive rates at Mandarin Oriental properties worldwide.
• Health & Colleague Wellness: Comprehensive health benefits and global wellness programmes.
• Retirement Plans: Competitive plans based on length of service and role.
• Local Benefits: Competitive salary and benefits package.

Key skills/competency

• IT Governance
• Data Governance
• Risk Management
• Regulatory Compliance
• Information Security
• Data Privacy Laws
• Audit Management
• COBIT Framework
• ITIL Framework
• DMBOK