> Markdown version of [/jobs/ext/2951410-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2951410-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst - **Company:** Liverpool Football Club - **Location:** Liverpool, UK - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Data Analysis, Microsoft Azure, Business Systems, Software as a Service, Cloud Computing Security, Cyber Security, Information Systems, Information Leak Prevention, Identity and Access Management, Microsoft Security Essentials, PCI Data Security Standards, Cloud Services, Phishing, Security Information and Event Management, Software Vulnerability Management, Data Logging, Cyber Threat Analysis, Microsoft InTune, Information Technology, Cyber Warfare, Security Orchestration, Automation & Response - **Published:** September 17, 2026 - **Apply:** https://www.jobs.service.gov.uk/jobs/6aabc38b9975616e1fd3d421/apply ## About the Role * Demonstrable experience in an information security, cyber operations, SOC, cloud security, IT security or similar technical role. * Experience of investigating security alerts, vulnerabilities, incidents or control weaknesses in a business environment. * Knowledge of Microsoft 365 security technologies, ideally including Defender, Sentinel, Entra ID, Intune and Purview. * Understanding of cyber security frameworks and standards such as ISO 27001, Cyber Essentials, PCI DSS and NIST. * Experience working with managed security providers, technology teams, business stakeholders or third-party suppliers. * Degree, professional certification, or equivalent experience in Information Technology, Computer Science, Information Systems, Cyber Security or a related field. * Relevant security certifications, such as Security+, SC-200, AZ-500, CySA+, CISSP, CISM or CEH, would be advantageous., * Strong analytical, problem-solving and data interpretation skills, with the ability to identify patterns, assess risk and recommend practical action. * Excellent written and verbal communication skills, with the confidence to explain technical issues clearly to a range of audiences. * Ability to build effective working relationships across a business and influence stakeholders in a collaborative and pragmatic way. * Self-motivated, detail-oriented and comfortable managing competing priorities in a busy and evolving environment. * Trusted to handle sensitive information with discretion, integrity and sound judgement. * Curious, proactive and committed to continuous improvement, with a desire to keep developing technical and professional security skills. Desirable Technical Knowledge * Microsoft 365 security technologies and the wider Microsoft E5 security ecosystem. * SIEM, SOAR, endpoint detection and response, identity protection and cloud security technologies. * Azure, AWS or similar cloud platforms, including cloud security posture, logging, monitoring and access control concepts. * Email security, phishing prevention, security awareness platforms and user behaviour risk reduction. * Secure web gateway, CASB, cloud application control and Data Loss Prevention technologies. * Threat intelligence, security monitoring, vulnerability management and incident response processes. ## Description This is a hands-on role with real breadth, working across security operations, vulnerability management, cloud and Microsoft security technologies, third-party assurance, data protection and security awareness. You will work closely with our managed Security Operations Centre, internal technology teams and business stakeholders to identify, investigate and reduce cyber security risks across the Club. This hybrid role is based in Liverpool, with three days per week on-site, and would suit an analyst who has built a strong foundation in information security or cyber operations and is looking for a broader position with greater visibility, ownership and opportunity to influence security maturity across a complex and high-profile organisation., * Support the management, investigation and coordination of security alerts, incidents and vulnerabilities, working with our managed Security Operations Centre and internal teams to ensure effective response and remediation. * Own the tracking and follow-up of vulnerabilities, control gaps and remediation actions, helping to drive measurable security improvement across the Club. * Conduct security reviews, assurance activity, control testing and risk assessments across business systems, cloud services, suppliers and technology projects. * Support and improve security awareness activity, including colleague communications, training content, phishing simulations and targeted guidance for higher-risk scenarios. * Contribute to the delivery of information security projects and continuous improvement initiatives, including enhancements to Microsoft security tooling, monitoring, identity, data protection and cloud security controls. * Monitor emerging cyber threats, security technologies and regulatory requirements, translating relevant developments into practical recommendations for the Club. * Produce clear security reports, dashboards and key metrics for management reporting, risk tracking and decision-making. * Build strong relationships with colleagues across the Club, promoting practical security behaviours and helping teams understand and manage information security risks. * Work with Microsoft security technologies, including Defender, Sentinel, Entra ID, Intune and Purview, supporting monitoring, investigation, configuration review and control improvement activity. * Support supplier and third-party security assurance activities, including security questionnaires, risk reviews and follow-up of identified issues. * Help maintain compliance with information security standards, regulations and internal policies, including ISO 27001, Cyber Essentials, PCI DSS and Premier League cyber security requirements. ## Related Videos - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Developers Communities in San Francisco - WeAreDevelopers LIVE from Corgi Cafe](https://www.wearedevelopers.com/videos/2144-developers-communities-in-san-francisco-wearedevelopers-live-from-corgi-cafe) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)