Information Security Analyst

Liverpool Football Club; Liverpool; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

Liverpool FC is seeking an Information Security Analyst to help protect people, data and digital services across a high‑profile club. The role spans security operations, vulnerability management, cloud and Microsoft security, supplier assurance and governance.

You will work with our SOC, technology teams and stakeholders to identify, investigate and reduce cyber risks, with three days on‑site in Liverpool in a hybrid 35‑hour per week arrangement.

Qualifications

• Demonstrable experience in information security, cyber operations, SOC, cloud security or similar.
• Experience investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment.
• Knowledge of Microsoft 365 security technologies (Defender, Sentinel, Entra ID, Intune, Purview).
• Understanding of ISO 27001, Cyber Essentials, PCI DSS, NIST or equivalent.

Responsibilities

• Support and coordinate security alerts, incidents and vulnerabilities with the SOC and internal teams.
• Own tracking and follow-up of vulnerabilities and remediation actions to drive security improvements.
• Conduct reviews, assurance activities, control testing and risk assessments across systems, cloud services and projects.
• Support security awareness activities and phishing simulations for staff.
• Contribute to information security projects, including Microsoft security tooling and cloud security controls.
• Produce security reports and dashboards for management and risk tracking.

Skills

Information security

SOC operations

Cloud security

Microsoft 365 security

Threat & vulnerability management

Incident response

Security awareness

Risk assessment

Stakeholder management

Analytical thinking

Education

Bachelor's degree

Security certification

Tools

Microsoft Defender

Sentinel

Entra ID

Intune

Purview

Job description

We are looking for an Information Security Analyst to join the team at Liverpool FC and help protect the people, systems, data and digital services that support one of the world’s most recognisable football clubs.

This is a hands‑on role with real breadth, working across security operations, vulnerability management, cloud and Microsoft security technologies, third‑party assurance, data protection and security awareness. You will work closely with our managed Security Operations Centre, internal technology teams and business stakeholders to identify, investigate and reduce cyber security risks across the Club. This hybrid role is based in Liverpool, with three days per week on‑site, and would suit an analyst who has built a strong foundation in information security or cyber operations and is looking for a broader position with greater visibility, ownership and opportunity to influence security maturity across a complex and high‑profile organisation.

What will you be doing?

• Support the management, investigation and coordination of security alerts, incidents and vulnerabilities, working with our managed Security Operations Centre and internal teams to ensure effective response and remediation.
• Own the tracking and follow‑up of vulnerabilities, control gaps and remediation actions, helping to drive measurable security improvement across the Club.
• Conduct security reviews, assurance activity, control testing and risk assessments across business systems, cloud services, suppliers and technology projects.
• Support and improve security awareness activity, including colleague communications, training content, phishing simulations and targeted guidance for higher‑risk scenarios.
• Contribute to the delivery of information security projects and continuous improvement initiatives, including enhancements to Microsoft security tooling, monitoring, identity, data protection and cloud security controls.
• Monitor emerging cyber threats, security technologies and regulatory requirements, translating relevant developments into practical recommendations for the Club.
• Produce clear security reports, dashboards and key metrics for management reporting, risk tracking and decision‑making.
• Build strong relationships with colleagues across the Club, promoting practical security behaviours and helping teams understand and manage information security risks.
• Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity.
• Support supplier and third‑party security assurance activities, including security questionnaires, risk reviews and follow‑up of identified issues.
• Help maintain compliance with information security standards, regulations and internal policies, including ISO 27001, Cyber Essentials, PCI DSS and Premier League cyber security requirements.

Who are we looking for?

Experience & Qualifications

• Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.
• Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment.
• Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.
• Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.
• Experience working with managed security providers, technology teams, business stakeholders or third‑party suppliers.
• Degree, professional certification, or equivalent experience in Information Technology, Computer Science, Information Systems, Cyber Security or a related field.
• Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.

Skills & Personal Attributes

• Strong analytical, problem‑solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action.
• Excellent written and verbal communication skills, with the confidence to explain technical issues clearly to a range of audiences.
• Ability to build effective working relationships across a business and influence stakeholders in a collaborative and pragmatic way.
• Self‑motivated, detail‑oriented and comfortable managing competing priorities in a busy and evolving environment.
• Trusted to handle sensitive information with discretion, integrity and sound judgement.
• Curious, proactive and committed to continuous improvement, with a desire to keep developing technical and professional security skills.

Desirable Technical Knowledge

• Microsoft 365 security technologies and the wider Microsoft E5 security ecosystem.
• SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.
• Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts.
• Email security, phishing prevention, security awareness platforms and user behaviour risk reduction.
• Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies.
• Threat intelligence, security monitoring, vulnerability management and incident response processes.

WHy should you apply?

This is an opportunity to join a small, influential information security team at a globally recognised football club, with exposure to a broad and modern security environment. You will have the chance to work across security operations, Microsoft security tooling, cloud security, vulnerability management, supplier assurance, awareness and governance activity, helping to shape how information security continues to mature across the Club.

If you are looking for a role that moves beyond alert handling and gives you the opportunity to work with technology teams, business stakeholders and external partners on meaningful security improvement, this could be an excellent next step.

This is a full‑time permanent position working 35 hours per week. Your main base will be our city centre office in Liverpool.