Data & Information Risk Officer

We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

Our vision here in Sky Data is to enable Sky’s growth ambitions though Data and AI: deepening customer relationships, optimising commercial performance, and enhancing operational efficiency.

Sky Data brings a wealth of data and analytics capabilities into one place, building expertise and capability that supports our Sky and OTT businesses across Europe to keep data safe, trusted and usable. We partner with teams across the business to create innovative data products that improve Sky and bring value to our customers.

We’re on a mission to bring customers more of what they love by unlocking the power of data, and we’re made up of amazing people based in London, Scotland, Milan, Munich, and Chennai.

Our mission is expanding so that we can unlock further value from unstructured data while managing the new data and information risks presented by AI.

• Lead Data & Information Risk Management – you’ll be accountable for data and information risk management within one of three key business domain areas (Consumer, Content, or Group Functions), operating across related business and support functions and acting as a business risk partner for Data & Information. You will support other DIROs across domains where priorities and capacity dictates.
• Identify, Assess and Drive Risk Mitigation – ensure the right people, processes, technology and data controls are in place regarding how data and information is collected, stored, used, shared and disposed of to effectively mitigate data & information risks within your given business domain. You’ll take a lead role in identifying risks posed by proliferation of AI use cases and driving appropriate mitigation through implementation of controls.
• Design and Implement Risk Management Frameworks – define the approach and embed the frameworks to proactively manage and report across data and information risks identified within your given business domain area and across Sky.
• Drive Assurance of Data and information Controls – partner with accountable System Owners, Data Owners and Stewards to ensure appropriate data and information management controls are in place across your respective business area and implemented per respective policies and standards. Provide assurance and oversight on effectiveness of controls implemented.
• Partner With and Influence Cross-Functional teams – proactively collaborate with peer DIROs and teams across Sky Data, Legal & DPO, Compliance and Group Technology to align on data and information risk best practices. Collaborate across cross-functional teams to ensure a holistic risk management approach.
• Own Monitoring and Reporting of Data & Information Risks – lead on the ongoing monitoring and reporting of effectiveness of controls and burn down of data and information risks to Data & Information Governance committees, associated executive forums and to key senior sponsors. Provide clarity and decisiveness in risk mitigation plans and present recommendations on addressing data and information risks.
• Promote Risk Awareness – advocate for data and information risk management across Sky Group. Stay informed about market trends and emerging technologies in risk management, providing valuable insights and actively contributing to data innovation within Sky Group.

• Strong Data Risk & Regulatory Expertise – good working knowledge of data protection, data privacy, information security and AI regulations (, UK GDPR, DPA 2018, EU AI Act, NIS, PECR). Experience translating regulatory requirements into practical control frameworks and ability to assess data lifecycle risks (collection, processing, sharing, retention, deletion) across complex enterprise environments.
• Enterprise Risk…