AI governance is rarely one job title. The IAPP groups the work into eight types, from policy and legal to technical and assurance, and says one person often covers several. Employers ask for AI knowledge combined with risk, compliance or privacy experience. Some established credentials exist from IAPP and ISACA. We point to them and issue none.
01Is AI governance a single job?
No. The IAPP's AI Governance Skills Framework, published on 30 September 2026, says the work is spread across many roles and is often called a team sport. Its authors built it from IAPP job and salary surveys from 2023 to 2026 and from public job profiles collected between January and July 2026 that explicitly called for AI governance work (IAPP).
The framework also warns that titles lag behind the work. It records alternative titles for each profile because the work is more common than the label, so searching only for the phrase AI governance will miss roles. It adds that few organisations will need every profile, and that responsibilities overlap.
02What are the eight kinds of AI governance work?
Here is the IAPP's grouping, in our words (IAPP, professional profiles). The full role descriptions are for IAPP members.
- Policy: tracks new rules, writes internal AI policies and talks to regulators.
- Governance: runs committees, tool inventories, risk registers and training.
- Technical: builds controls and monitoring into systems and tests them for safety, fairness, robustness and security.
- Product: brings risk and legal needs into product plans and reviews of new AI uses.
- Ethics: reviews social and ethical impact and consults the people affected.
- Risk: keeps risk registers, supports assessments and incident response.
- Legal: turns AI laws into practical controls and advises on adoption.
- Assurance: audits and evaluates governance and controls.
03What skills do these roles ask for?
The IAPP's 2025 profession report says the people needed understand AI, have experience in governance, risk and compliance, and can turn legal requirements into usable policies. Larger companies can split these across several roles, while smaller ones look for people who cover all of them. Respondents expected skills such as red teaming (testing a system by trying to make it fail) to be needed more (IAPP, AI Governance Profession Report 2025).
Stanford's 2026 AI Index reports AI-specific governance roles grew 17% in 2025 (Stanford HAI). In the IAPP survey, only 10 of 671 respondents expected to need no extra governance staff in the next year. Law also creates demand. Article 4 of the EU AI Act asks providers and deployers to take measures, to their best extent, to ensure enough AI literacy among their staff (AI Act, Article 4). We give no pay figures, because we have not verified any. The IAPP runs its own salary surveys if you need them.
04Where do people in these roles come from?
The IAPP found that organisations tend to start by giving the work to existing staff, then hire senior managers, often people with a background in another digital governance field such as privacy. In its survey, privacy and legal-and-compliance teams each held primary responsibility in 22% of organisations, IT 17%, data governance 10%, ethics and compliance 6% and security 5%. So a path in from privacy, legal, risk, audit, security or data work is common, and technical people who understand testing and monitoring are needed too.
If you are moving into the field, the frameworks work as a reading list: the NIST AI Risk Management Framework, an outline of ISO/IEC 42001, and the OECD AI Principles. Drafting a one-page tool inventory and acceptable-use rule for a real or imagined small team shows the same skills the profiles describe. Nothing here guarantees a job.
05Which credentials exist?
These are run by other organisations. We do not issue, endorse or guarantee any credential, and holding one does not promise a job. Check the issuer's page for what is tested, what it costs and how it is kept current.
- AIGP (Artificial Intelligence Governance Professional) from the IAPP. The IAPP says it shows knowledge of AI systems, relevant laws, major frameworks and the AI life cycle, and publishes a free Body of Knowledge and study guide (IAPP).
- ISACA AI credentials. ISACA's credential list, as of 24 October 2026, includes Advanced in AI Audit (AAIA), Advanced in AI Security Management (AAISM), Advanced in AI Risk (AAIR) and, in beta, Advanced in AI Governance (AAIG) (ISACA).
?What is not known
- Job titles and credentials in this field change quickly; the IAPP says roles and labels have shifted since its research began.
- We could not read the IAPP's full role descriptions, which are for members, so we describe only its public summaries.
- We found no verified, independent figures on pay or on how many jobs exist, so we give none.
QQuestions people ask
Do I need a law degree or a technical degree to work in AI governance?
The sources describe eight types of work, some legal, some technical, some policy or audit. We found no single required degree; check the job posting and the issuer of any credential.
Does this site offer an AI governance certificate?
No. We are not a certifier or training body. We link to credentials from the organisations that run them.
Last checked October 24, 2026. Rules and settings change, so open the source to see the current version.
- AI Governance Skills Framework: Who is an AI governance professional? IAPP Public introduction to the framework, its method and the eight categories of work.
- AI Governance Skills Framework: professional profiles IAPP Public summaries of what each of the eight profile types does.
- AI Governance Profession Report 2025 IAPP and Credo AI Survey report used for skills, team structure, hiring patterns and staffing needs.
- The 2026 AI Index Report, Responsible AI chapter Stanford HAI Source of the 17% growth in AI-specific governance roles.
- AI Act, Article 4: AI literacy Future of Life Institute, AI Act Explorer Non-official copy of the amended article, used for the AI literacy duty on providers and deployers.
- AIGP: Artificial Intelligence Governance Professional IAPP Issuer's page on the AIGP credential and its Body of Knowledge.
- ISACA credentials, AAIA page ISACA Issuer's page whose credential list names its AI audit, security, risk and governance credentials.
General information, not legal, medical, financial or investment advice. We are not affiliated with any company, agency or standards body named here. See our editorial policy and corrections, or tell us about a mistake at [email protected].