Becoming An AI Governance Manager
An AI governance manager makes sure an organisation knows which AI systems it uses. Each system needs a risk level and an owner who answers for it. That sounds like paperwork, and some of it is. But the job sits where legal, data science, security, procurement and the business meet. You have to speak to all of them. To see how ready you are for that, the free AIGP assessment gives you a score per domain in about fifteen minutes.
22Academy describes the role in its career plan for the AI governance manager. The role keeps the overview of the systems and classifies their risk. It also runs the assessments, sets the policies and follows the systems once they are in use. The first deliverables are an inventory of AI systems, the first risk assessments and a policy on staff use of AI.
The inventory comes first
Every later step depends on knowing what is there. The NIST AI Risk Management Framework is a voluntary framework, released on 26 January 2023. Its Govern function says: “Mechanisms are in place to inventory AI systems and are resourced according to organizational risk priorities.” It also asks that “legal and regulatory requirements involving AI are understood, managed, and documented”. So an AI governance manager starts with a list. Next comes the law that applies to each item on it.
That list is harder to make than it sounds. AI arrives through procurement and through features switched on in existing software. Staff also sign up for tools themselves. Our piece on the four NIST AI RMF functions shows how Govern sits across the other three. The AIGP course page covers the same ground for the exam.
Risk, policy and follow-up
Once the inventory exists, each system gets a risk classification and, where needed, an assessment. Then come the rules: who may use which tool with what data, and who approves a new one. NIST also asks for documented roles and for AI risk management training. Finally, the AI governance manager follows each system after go-live. A model that behaved well in testing can drift in use.
What the AI Act asks, and when
For organisations in Europe, the EU AI Act sets much of the role’s agenda. Its timeline changed in 2026. An AI governance manager needs the current version.
The Digital Omnibus on AI, Regulation (EU) 2026/1744 of 8 July 2026, entered into force on 27 July 2026. It moved the rules for high-risk systems listed in Annex III to 2 December 2027. That list includes AI used in recruitment and credit scoring. Systems that are high-risk because of the product legislation in Annex I follow on 2 August 2028. The European Commission’s AI Act implementation timeline shows every date in one place.
Other duties largely stayed where they were. Prohibited practices and AI literacy have applied since 2 February 2025, and the transparency rules in Article 50 since 2 August 2026. Still, the omnibus added two December dates. Generative systems already on the market before August get until 2 December 2026 to mark their output under Article 50(2). New prohibitions on non-consensual sexual deepfakes and child sexual abuse material also apply from 2 December 2026. However, the omnibus rewrote Article 4. Providers and deployers must now “take measures to support the development of AI literacy of their staff”. No specific level of literacy is required for any individual. Our AIGP study guide places these rules in the exam’s Body of Knowledge, the IAPP’s outline of what the exam covers.
Why the delay changes little for the job
A later deadline is not a lighter one. Once the Annex III rules apply, deployers must “assign human oversight to natural persons who have the necessary competence, training and authority”. You can’t do that for a system you haven’t found, classified and given an owner. The work NIST describes under Govern therefore comes first, and it takes time. For an AI governance manager, the year until then is the build phase.
Organisations seem to agree. The IAPP published its AI Governance Profession Report with Credo AI in April 2025. In it, 77% of the surveyed organisations said they were working on AI governance. Only 10 of 671 respondents, or 1.5%, expected to need no extra staff in the next twelve months. If you are weighing a move, the free AIGP assessment measures the distance quickly.
Which certifications an AI governance manager needs
No law requires a certificate for an AI governance manager. Employers, however, may ask for evidence that you understand both the AI side and the data protection side. The IAPP’s AIGP page says the credential “demonstrates competency in AI development” and in “ethical AI deployment”.
The career plan suggests the CIPP/E first and the AIGP second. Why that order? In Europe, an AI system that uses personal data falls under the GDPR today, well before any AI Act deadline. At three hours a day, the CIPP/E takes about a month on average and the AIGP about five weeks, though some people need far less and others far more. If you already hold the CIPP/E, start with the AIGP. Our article on which IAPP certification to take first explains the order for other roles.
What the AIGP tests that experience doesn’t
Experience teaches you how your own organisation does things. By contrast, the exam asks how the law and the frameworks say it should be done. Its scenarios won’t match your workplace exactly. We keep seeing candidates from privacy who lose marks on AI development and testing. We see candidates from data science with the opposite problem. A score per domain shows which one you are. The AIGP course costs €37 a week, with every lesson open from the first day.
Where to start as an AI governance manager
Start with the inventory, even an incomplete one, in your current job. Offer to find out which AI tools are already in use, by whom and with what data. That one exercise teaches you more about the role than any job description.
Then close the knowledge gap in a deliberate order. Measure first, so you don’t spend weeks on what you already know. The free AIGP assessment also gives you a study-time estimate along with your scores. Want to practise with others? Our AIGP Study Group on Facebook posts a scenario and a practice question every week. So do the AIGP Study Group on LinkedIn and Privacy Study Group on LinkedIn.
For the full route, the AIGP course page sets out what the course covers. The career plan then shows where an AI governance manager can go next.
