Data & Information Risk Officer

Sky; Isleworth; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid Working

Private healthcare

Pension

Job summary

Sky Data seeks a Data & Information Risk Officer to lead risk management across a major domain, partnering with Data Owners, Stewards and cross‑functional teams to implement controls and governance. You’ll shape risk frameworks, drive mitigation of AI/data risks, and report to executives.

A strong regulatory background and strategic collaboration skills are essential. Hybrid working is offered, with on‑site presence at Sky offices.

Qualifications

• Strong working knowledge of data protection, privacy, information security and AI regulations (UK GDPR, DPA 2018, EU AI Act, NIS, PECR).
• Experience designing, implementing and monitoring risk and control frameworks (three lines model).
• Ability to translate regulatory requirements into practical controls and report to executives.

Responsibilities

• Lead Data & Information Risk Management within a domain (Consumer, Content, or Group Functions).
• Identify, assess and drive mitigation of data & information risks across lifecycle stages.
• Design and embed risk management frameworks and report to governance bodies.
• Assure effectiveness of data controls with owners and stewards.
• Collaborate with Sky Data, Legal & DPO, Compliance and Group Technology.
• Monitor and report risk posture to governance committees and sponsors.
• Promote data risk awareness and contribute to data innovation across Sky.

Skills

Data risk

Regulatory expertise

Stakeholder influence

Program management

Risk governance

AI governance awareness

Job description

Job Description

We believe in better. And we make it happen.

Job Description

We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

Introduction

Our vision here in Sky Data is to enable Sky’s growth ambitions though Data and AI: deepening customer relationships, optimising commercial performance, and enhancing operational efficiency.

Sky Data brings a wealth of data and analytics capabilities into one place, building expertise and capability that supports our Sky and OTT businesses across Europe to keep data safe, trusted and usable. We partner with teams across the business to create innovative data products that improve Sky and bring value to our customers.

We’re on a mission to bring customers more of what they love by unlocking the power of data, and we’re made up of amazing people based in London, Scotland, Milan, Munich, and Chennai.

Our mission is expanding so that we can unlock further value from unstructured data while managing the new data and information risks presented by AI.

Data & Information Risk Officer

What You’ll Do

Lead Data & Information Risk Management – you’ll be accountable for data and information risk management within one of three key business domain areas (Consumer, Content, or Group Functions), operating across related business and support functions and acting as a business risk partner for Data & Information. You will support other DIROs across domains where priorities and capacity dictates.

Identify, Assess and Drive Risk Mitigation – ensure the right people, processes, technology and data controls are in place regarding how data and information is collected, stored, used, shared and disposed of to effectively mitigate data & information risks within your given business domain. You’ll take a lead role in identifying risks posed by proliferation of AI use cases and driving appropriate mitigation through implementation of controls.

Design and Implement Risk Management Frameworks – define the approach and embed the frameworks to proactively manage and report across data and information risks identified within your given business domain area and across Sky.

Drive Assurance of Data and information Controls – partner with accountable System Owners, Data Owners and Stewards to ensure appropriate data and information management controls are in place across your respective business area and implemented per respective policies and standards. Provide assurance and oversight on effectiveness of controls implemented.

Partner With and Influence Cross-Functional teams – proactively collaborate with peer DIROs and teams across Sky Data, Legal & DPO, Compliance and Group Technology to align on data and information risk best practices. Collaborate across cross-functional teams to ensure a holistic risk management approach.

Own Monitoring and Reporting of Data & Information Risks – lead on the ongoing monitoring and reporting of effectiveness of controls and burn down of data and information risks to Data & Information Governance committees, associated executive forums and to key senior sponsors. Provide clarity and decisiveness in risk mitigation plans and present recommendations on addressing data and information risks.

Promote Risk Awareness – advocate for data and information risk management across Sky Group. Stay informed about market trends and emerging technologies in risk management, providing valuable insights and actively contributing to data innovation within Sky Group.

Minimum Requirements

Strong Data Risk & Regulatory Expertise – good working knowledge of data protection, data privacy, information security and AI regulations (e.g., UK GDPR, DPA 2018, EU AI Act, NIS, PECR). Experience translating regulatory requirements into practical control frameworks and ability to assess data lifecycle risks (collection, processing, sharing, retention, deletion) across complex enterprise environments.

Enterprise Risk Management Know How – demonstrable experience designing, implementing, and monitoring risk and control frameworks e.g. three lines model. Proven ability to conduct risk assessments, define risk appetite, drive control design & implementation and report at executive / board level. Evidence of relevant audit and/or risk qualification(s).

Strategic Data Risk and Technical Acumen – ability to anticipate emerging risks (e.g. AI governance, data ethics, cross-border data flows), with a solid understanding of modern data ecosystems such as cloud data platforms, AI/ML and third-party data sharing.

Business Partner & Senior Stakeholder Influence – demonstrable ability to successfully partner and embed in a business unit without direct reporting lines, building trust and lasting relationships. Be seen by business stakeholders including at senior and executive levels as a trusted and reliable partner. Ability to influence and challenge senior stakeholders. Experience driving and influencing cross-functional teams and uniting people across all business levels whilst adapting leadership styles to motivate teams and partners.

Results Driven Track Record – Strong and proven level expertise in data & information risk management and data governance. Strong track record of successfully initiating, delivering, and maintaining data risk management initiatives. Strong communication skills to effectively distil complex data risk topics into clear narratives at all stakeholder levels including for executive audiences.

Independent Operator & Comfortable in Matrix Structure - proven experience in autonomously implementing data and information risk initiatives in large complex organisations leveraging support from cross-functional teams enabling delivery, not just oversight. Comfortable operating without a direct team or direct reports. Able to operate in complex organisations (ideally globally) with matrix reporting and working structures. Comfortable working in environments with both hard and dotted reporting lines whilst successfully executing against set objectives.

Credible – established leader with strong values, impeccable integrity, and an instinct for making sound decisions. Impressive record in defining and implementing best-in-class data risk frameworks, accompanied by first-class communication skills and an ability to translate complex scenarios for business audiences.

Programmatic Excellence – strong background in program management for data-centric initiatives, utilising both agile and non-agile delivery practices. Proficient in running and supporting executive steering groups, ensuring clear updates and top-quality decision-making through thoughtful preparation and follow-up.

Team Overview

Data - Want to unlock the power of data? Our Group Data Hub works with millions of data transformations every day to deliver value, improve customer experience and enable new product launches. From architecture to analytics and engineering to science: it’s how we bring customers more of what they love.

The rewards

There's one thing people can't stop talking about when it comes to : the perks.

Here’s a Taster

• Sky Q, for the TV you love all in one place
• The magic of Sky Glass at an exclusive rate
• A generous pension package
• Private healthcare
• Discounted mobile and broadband
• A wide range of Sky VIP rewards and experiences

Inclusion & How You'll Work

We are a Disability Confident Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need to your recruiter as early as you can.

We’ve embraced hybrid working and split our time between unique office spaces and the convenience of working from home. You’ll find out more about what hybrid working looks like for your role later on in the recruitment process.

Your Office Space

Osterley

Our Osterley Campus is a 10-minute walk from Syon Lane train station. Or you can hop on one of our free shuttle buses that run to and from Osterley, Gunnersbury, Ealing Broadway and South Ealing tube stations. There’s also plenty of bike shelters and showers.

On campus, you’ll find 13 subsidised restaurants, cafes, and a Waitrose. You can keep in shape at our subsidised gym, catch the latest shows and movies at our cinema, get your car washed and even get pampered at our beauty salon.

Hybrid Working - 3 days onsite per week

We'd love to hear from you

Inventive, forward-thinking minds come together to work in Tech, Product and Data at Sky. It’s a place where you can explore what if, how far, and what next.

But better doesn’t stop at what we do, it’s how we do it, too. We embrace each other’s differences. We support our community and contribute to a sustainable future for our business and the planet.

If you believe in better, we’ll back you all the way.

Just so you know: if your application is successful, we’ll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.