Asks for

The ad says“Strong analytical, problem-solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action.”
The ad says“Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.”
The ad says“Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.”
The ad says“Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.”
The ad says“Strong analytical, problem-solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.”
The ad says“Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.”
The ad says“Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.”
The ad says“Strong analytical, problem-solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.”
The ad says“Excellent written and verbal communication skills, with the confidence to explain technical issues clearly to a range of audiences.”
The ad says“Excellent written and verbal communication skills, with the confidence to explain technical issues clearly to a range of audiences.”

Values

The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.”
The ad says“Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts.”
The ad says“Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts.”
The ad says“Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies.”
The ad says“SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.”
The ad says“Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies.”
The ad says“Email security, phishing prevention, security awareness platforms and user behaviour risk reduction.”
The ad says“SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.”
The ad says“SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.”
The ad says“Threat intelligence, security monitoring, vulnerability management and incident response processes.”
The ad says“Email security, phishing prevention, security awareness platforms and user behaviour risk reduction.”
The ad says“Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies.”
The ad says“Email security, phishing prevention, security awareness platforms and user behaviour risk reduction.”
The ad says“Threat intelligence, security monitoring, vulnerability management and incident response processes.”
The ad says“SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.”
The ad says“SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.”
The ad says“Threat intelligence, security monitoring, vulnerability management and incident response processes.”
The ad says“Threat intelligence, security monitoring, vulnerability management and incident response processes.”

⚪ About the role

Information Security Analyst

We are looking for an Information Security Analyst to join the team at Liverpool FC and help protect the people, systems, data and digital services that support one of the world’s most recognisable football clubs.

This is a hands-on role with real breadth, working across security operations, vulnerability management, cloud and Microsoft security technologies, third-party assurance, data protection and security awareness. You will work closely with our managed Security Operations Centre, internal technology teams and business stakeholders to identify, investigate and reduce cyber security risks across the Club. This hybrid role is based in Liverpool, with three days per week on-site, and would suit an analyst who has built a strong foundation in information security or cyber operations and is looking for a broader position with greater visibility, ownership and opportunity to influence security maturity across a complex and high-profile organisation.

🟡 What will you be doing?

Support the management, investigation and coordination of security alerts, incidents and vulnerabilities, working with our managed Security Operations Centre and internal teams to ensure effective response and remediation.
Own the tracking and follow-up of vulnerabilities, control gaps and remediation actions, helping to drive measurable security improvement across the Club.
Conduct security reviews, assurance activity, control testing and risk assessments across business systems, cloud services, suppliers and technology projects.
Support and improve security awareness activity, including colleague communications, training content, phishing simulations and targeted guidance for higher-risk scenarios.
Contribute to the delivery of information security projects and continuous improvement initiatives, including enhancements to Microsoft security tooling, monitoring, identity, data protection and cloud security controls.
Monitor emerging cyber threats, security technologies and regulatory requirements, translating relevant developments into practical recommendations for the Club.
Produce clear security reports, dashboards and key metrics for management reporting, risk tracking and decision-making.
Build strong relationships with colleagues across the Club, promoting practical security behaviours and helping teams understand and manage information security risks.
Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity.
Support supplier and third-party security assurance activities, including security questionnaires, risk reviews and follow-up of identified issues.
Help maintain compliance with information security standards, regulations and internal policies, including ISO 27001, Cyber Essentials, PCI DSS and Premier League cyber security requirements.

🟢 Who are we looking for?

Experience & Qualifications

Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role.
Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment.
Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview.
Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST.
Experience working with managed security providers, technology teams, business stakeholders or third-party suppliers.
Degree, professional certification, or equivalent experience in Information Technology, Computer Science, Information Systems, Cyber Security or a related field.
Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous.

Skills & Personal Attributes

Strong analytical, problem-solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action.
Excellent written and verbal communication skills, with the confidence to explain technical issues clearly to a range of audiences.
Ability to build effective working relationships across a business and influence stakeholders in a collaborative and pragmatic way.
Self-motivated, detail-oriented and comfortable managing competing priorities in a busy and evolving environment.
Trusted to handle sensitive information with discretion, integrity and sound judgement.
Curious, proactive and committed to continuous improvement, with a desire to keep developing technical and professional security skills.

Desirable Technical Knowledge

Microsoft 365 security technologies and the wider Microsoft E5 security ecosystem.
SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies.
Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts.
Email security, phishing prevention, security awareness platforms and user behaviour risk reduction.
Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies.
Threat intelligence, security monitoring, vulnerability management and incident response processes.

🔵 WHy should you apply?

This is an opportunity to join a small, influential information security team at a globally recognised football club, with exposure to a broad and modern security environment. You will have the chance to work across security operations, Microsoft security tooling, cloud security, vulnerability management, supplier assurance, awareness and governance activity, helping to shape how information security continues to mature across the Club.

If you are looking for a role that moves beyond alert handling and gives you the opportunity to work with technology teams, business stakeholders and external partners on meaningful security improvement, this could be an excellent next step.

This is a full-time permanent position working 35 hours per week. Your main base will be our city centre office in Liverpool.

Please note, this vacancy may close early if we receive a high volume of applications, so we encourage you to apply as soon as possible.

To reward your hard work and commitment, we offer a competitive salary, 25 days’ holiday, plus 8 bank holidays and the option to purchase up to an additional 5 days. You will also have access to our benefits kit bag, which includes but is not limited to:

Contributory pension scheme matching up to 5.5%
Life Assurance Cover
Free financial guidance and mortgage advice
Car salary sacrifice scheme for affordable driving
Cycle to Work scheme to keep you active
Purchase season ticket loans for easier commuting
Exclusive shopping discounts & cashback with top retailers
Will Writing Service for future planning
Employee Assistance Programme for confidential support
Medicash Health Cash Plan for everyday healthcare needs
Volunteering opportunities to give back to the community
Special LFC perks – retail discounts, partner offers, free LFCTV GO access, and priority tickets for matches, events & concerts

…and much more! LFC Benefits.pdf

At Liverpool Football Club, we have an unwavering commitment to equality, diversity and inclusion and are always looking to make a positive difference in the communities that we operate within. We are proud of our achievements in this area; maintaining the Premier League Equality Standard Advanced Level, becoming a founding signatory of the Football Association’s Football Leadership Diversity Code and being recognised as a leader in this important area on and off the pitch. We take our responsibilities in this area seriously and, through the work being done across the Club, we are committed to increasing the diversity of our people and becoming an increasingly inclusive workplace for all. We are committed to hiring great people representative of diverse backgrounds, perspectives and skills across our entire business. If you share our enthusiasm and passion for inclusivity, then we want to hear from you.

Liverpool FC is committed to safeguarding and promoting the welfare of children and vulnerable adults and expects all Colleagues and Volunteers to share this commitment.

#LFCJobs

‍