Data Protection Officer

We are Two Circles, a Sports & Entertainment Marketing business that drives growth for sports properties by delivering deeper connections with fans through the intelligent use of data and technology. We work with clients to help them understand and influence fan behaviour, including spending habits, event attendance, and content consumption. Our platforms and services are trusted by over 900 clients globally, including the English Premier League, Red Bull, UEFA, VISA, the NFL, Nike, and Amazon.

As a Data Protection Officer at Two Circles, you will have the opportunity to drive and shape the privacy compliance and AI governance frameworks across one of the world’s leading and fastest-growing sports and entertainment marketing and technology businesses. We are looking for someone who is comfortable working at pace while balancing the demands of maintaining a first-class privacy programme with enabling high levels of growth for Two Circles and our clients.

You will be responsible for our global privacy framework being continually improved and deeply embedded within our business. Reporting to the Group General Counsel, you will act as a trusted senior advisor within the business, providing pragmatic, risk-based executive-level guidance that enables growth while ensuring strong regulatory compliance and protection of personal data. This is a hands-on leadership role, requiring a combination of strategic oversight and deep technical expertise.

Key Responsibilities:

• Leadership & Strategy: Act as a senior subject-matter expert on data protection and AI governance across the organisation; set and deliver the global privacy strategy and roadmap; provide clear, commercially aware advice on privacy risk, compliance, and mitigation.
• Governance, Risk & Compliance: Own and oversee core compliance artefacts, including ROPA, DPIAs, risk registers, and policy frameworks; ensure ongoing compliance with applicable regulations; lead internal and external audits across relevant frameworks; manage and continually improve privacy governance, controls, and reporting; manage international data transfers on a global basis.
• Privacy by Design & Technology: Embed Privacy by Design and Security by Design principles into product development, solution architecture, and client delivery; partner closely with Technology and Product teams to influence design decisions; provide expert oversight of technical data protection controls; identify and implement opportunities to automate and enhance privacy and security controls across the business.
• Incident Management & Assurance: Lead and coordinate responses to data protection and information security incidents, including investigation, remediation, and regulatory engagement; oversee third-party and vendor due diligence, contract reviews, and ongoing assurance; support internal stakeholders with complex assurance, audit, and client security questionnaires.
• Training & Culture: Design and deliver training and awareness programmes to upskill colleagues on data protection and information security; champion a strong culture of accountability, good practice, and continuous improvement across Two Circles.

Essential: Significant experience in a data protection, privacy or information governance role (typically 6–10+ years); strong, practical knowledge of UK GDPR, EU GDPR, PECR, CCPA, and other relevant global privacy legislation; experience working with ISO 27XXX frameworks and audits; proven ability to lead risk management and governance activities; strong understanding of technical implementations of data protection controls; ability to tailor advice through a clear, risk-based and commercially pragmatic lens.

Desirable: Familiarity with Microsoft Azure security tooling and data warehousing environments; knowledge of AI risk and governance frameworks; experience of, or a strong interest in, the business of sports and entertainment.

What can we offer you? We offer a benefits package to suit you and your lifestyle! Out of a core monthly budget, you can choose your own comprehensive benefit package, including renowned Team Days, Summer Away Days, 23 standard days of holiday (+1 Birthday, +2 for a ‘Big Life Event’ and +1 Admin Day), closure of office over Christmas (plus Bank Holidays), discretionary bonus based on company performance, performance reviews every 6 months with discretionary salary increases, private healthcare (Vitality) and/or Health Cash Plan (Medicash), mobile phone contribution, sport challenge contribution, gym membership contribution, and 2x annual kit drops.

Two Circles is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, age, disability or background.