Job DescriptionThe RoleThe Senior Security Analyst will contribute to the successful delivery of information security services, including monitoring, diagnosing and resolving security events and incidents. The role provides technical expertise in recommending, developing, implementing and monitoring enterprise-wide information security policies and procedures, researching solutions to information security issues, and promoting information security awareness.
Key Responsibilities- Strategic Planning- Understand the IFM Investors' Business Plan.
Business Performance - Understand IFM Investors' long term revenue and profitability by understanding the metrics and targets.
- Understand and contribute to other business plan targets.
User Support- Provide support, including troubleshooting system failures, pre-emptively identifying and resolving issues, and delivering user training.
- Perform administration tasks that enable business groups within IFM to carry out day-to-day activities.
- Manage vendors to support timely resolution of requests and problems.
Stakeholder Management- Engage effectively with IFM users to understand reported issues and received requests and deliver the appropriate solution or service.
- Liaise with IT Managers, Team Leaders and colleagues regarding potential problems.
- Liaise with external software vendors and service providers to resolve issues as appropriate.
Policy and Process Management- Comply with all policies and delegations applicable to the activities and decisions required in this role.
Functional Analysis- Continually monitor networks, servers, endpoints and cloud applications.
- Provide cyber security subject matter expertise to internal and external stakeholders.
- Conduct vulnerability assessments, security audits and reviews.
- Analyse trends in operational incidents and raise problem tickets to address underlying causes.
- Proactively identify areas of risk, investigate root causes and propose mitigation strategies.
- Automate, improve and innovate cyber security activities.
Performance Measures - Delivery of specific team and individual goals, change requests and incident resolutions.
- Feedback from IFM business users, application business owners and IT colleagues on the effectiveness of cyber awareness and services.
- Assessment by the Associate Director Information Security of overall performance outcomes described in the annual Performance Plan.
- Contribution to the achievement of IFM Investors' Five Year Strategic Goals.
Your Background and ExperienceExperience- Experience in Investment Management or a related area.
- 10+ years' experience providing IT operational support or in a related area.
Qualifications- Tertiary qualifications in IT or a related discipline.
- Preferably 10+ years' IT experience, with strong experience in information security principles and concepts, particularly at a technical level.
- Strong background in Microsoft desktop/server, Microsoft Azure and cloud technologies, security, and networking technologies.
- Knowledge of security frameworks, standards and controls, such as NIST and Essential Eight.
- Exposure to developing information security policies and governance frameworks.
- Exposure to IT security operations in a large or complex organisation.
- In-depth experience or understanding of IT security tools and controls.
Business Knowledge - Preferably an IT degree with exposure to cyber security processes and procedures.
- Demonstrated experience within an information systems environment.
- Knowledge of risk analysis, application and system software, including security software and hardware, and related capabilities and performance characteristics.
- Understanding of technical security safeguards and the principles, theories, techniques, practices, policies and procedures of information security.
- Knowledge of data communications and the concepts, theories and practices of advanced technologies.
- Strong written, oral and presentation skills.
- Demonstrated analytical, problem-solving and interpersonal skills.
- Proven experience with troubleshooting principles, methodologies and issue-resolution techniques.
- Confident engaging directly with users and vendors.
- Works effectively under time pressure to resolve issues.
- Stakeholder engagement and management.
- Procedure documentation and training.
Technical Knowledge - Understanding of cyber security identification, prevention, detection, response, recovery and mitigation.
- Understanding of risk management frameworks.
- Excellent knowledge of Microsoft operating systems and applications in relation to best practice hardening and security configuration.
- Security knowledge across firewalls, web, email and endpoint protection.
- Knowledge of identity management tooling, information protection tools, data loss prevention technologies and cloud security posture management.
The anticipated base salary range for this position is listed below. Exact compensation amount may vary and will be determined by several components including but not limited to the individual's experience, skills and qualifications. Total compensation for this role includes eligibility for a discretionary performance-based bonus.
$174,000-$220,000 USD
IFM also offers robust benefits offerings which include but is not limited to Comprehensive Medical, Dental and Vision plans (significant employer subsidy), 401(k) program with company match; Flexible Savings Accounts (FSA), Life Insurance, Long-Term Disability (LTD) and Short-Term Disability (STD) Insurance; Employee Assistance Program (EAP), Commuter Benefits and Headspace subscription.
