Hybrid Information Security Analyst — SOC, Cloud & Risk

Liverpool Football Club; Liverpool; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

Liverpool FC is seeking an Information Security Analyst to help protect people, data and digital services across a high‑profile club. The role spans security operations, vulnerability management, cloud and Microsoft security, supplier assurance and governance.

You will work with our SOC, technology teams and stakeholders to identify, investigate and reduce cyber risks, with three days on‑site in Liverpool in a hybrid 35‑hour per week arrangement.

Qualifications

• Demonstrable experience in information security, cyber operations, SOC, cloud security or similar.
• Experience investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment.
• Knowledge of Microsoft 365 security technologies (Defender, Sentinel, Entra ID, Intune, Purview).
• Understanding of ISO 27001, Cyber Essentials, PCI DSS, NIST or equivalent.

Responsibilities

• Support and coordinate security alerts, incidents and vulnerabilities with the SOC and internal teams.
• Own tracking and follow-up of vulnerabilities and remediation actions to drive security improvements.
• Conduct reviews, assurance activities, control testing and risk assessments across systems, cloud services and projects.
• Support security awareness activities and phishing simulations for staff.
• Contribute to information security projects, including Microsoft security tooling and cloud security controls.
• Produce security reports and dashboards for management and risk tracking.

Skills

Information security

SOC operations

Cloud security

Microsoft 365 security

Threat & vulnerability management

Incident response

Security awareness

Risk assessment

Stakeholder management

Analytical thinking

Education

Bachelor's degree

Security certification

Tools

Microsoft Defender

Sentinel

Entra ID

Intune

Purview

Job description

Liverpool FC is seeking an Information Security Analyst to help protect people, data and digital services across a high‑profile club. The role spans security operations, vulnerability management, cloud and Microsoft security, supplier assurance and governance.

You will work with our SOC, technology teams and stakeholders to identify, investigate and reduce cyber risks, with three days on‑site in Liverpool in a hybrid 35‑hour per week arrangement.