Senior Security Analyst, IT

IFM Investors•New York, NY

10d•Hybrid

About The Position

The Senior Security Analyst will contribute to the successful delivery of information security services, including monitoring, diagnosing and resolving security events and incidents. The role provides technical expertise in recommending, developing, implementing and monitoring enterprise-wide information security policies and procedures, researching solutions to information security issues, and promoting information security awareness.

Requirements

Experience in Investment Management or a related area.
10+ years’ experience providing IT operational support or in a related area.
Tertiary qualifications in IT or a related discipline.
Preferably 10+ years’ IT experience, with strong experience in information security principles and concepts, particularly at a technical level.
Strong background in Microsoft desktop/server, Microsoft Azure and cloud technologies, security, and networking technologies.
Knowledge of security frameworks, standards and controls, such as NIST and Essential Eight.
Exposure to developing information security policies and governance frameworks.
Exposure to IT security operations in a large or complex organisation.
In-depth experience or understanding of IT security tools and controls.
Preferably an IT degree with exposure to cyber security processes and procedures.
Demonstrated experience within an information systems environment.
Knowledge of risk analysis, application and system software, including security software and hardware, and related capabilities and performance characteristics.
Understanding of technical security safeguards and the principles, theories, techniques, practices, policies and procedures of information security.
Knowledge of data communications and the concepts, theories and practices of advanced technologies.
Strong written, oral and presentation skills.
Demonstrated analytical, problem-solving and interpersonal skills.
Proven experience with troubleshooting principles, methodologies and issue-resolution techniques.
Confident engaging directly with users and vendors.
Works effectively under time pressure to resolve issues.
Stakeholder engagement and management.
Procedure documentation and training.
Understanding of cyber security identification, prevention, detection, response, recovery and mitigation.
Understanding of risk management frameworks.
Excellent knowledge of Microsoft operating systems and applications in relation to best practice hardening and security configuration.
Security knowledge across firewalls, web, email and endpoint protection.
Knowledge of identity management tooling, information protection tools, data loss prevention technologies and cloud security posture management.

Responsibilities

Understand the IFM Investors’ Business Plan.
Understand IFM Investors’ long term revenue and profitability by understanding the metrics and targets.
Understand and contribute to other business plan targets.
Provide support, including troubleshooting system failures, pre-emptively identifying and resolving issues, and delivering user training.
Perform administration tasks that enable business groups within IFM to carry out day-to-day activities.
Manage vendors to support timely resolution of requests and problems.
Engage effectively with IFM users to understand reported issues and received requests and deliver the appropriate solution or service.
Liaise with IT Managers, Team Leaders and colleagues regarding potential problems.
Liaise with external software vendors and service providers to resolve issues as appropriate.
Comply with all policies and delegations applicable to the activities and decisions required in this role.
Continually monitor networks, servers, endpoints and cloud applications.
Provide cyber security subject matter expertise to internal and external stakeholders.
Conduct vulnerability assessments, security audits and reviews.
Analyse trends in operational incidents and raise problem tickets to address underlying causes.
Proactively identify areas of risk, investigate root causes and propose mitigation strategies.
Automate, improve and innovate cyber security activities.
Delivery of specific team and individual goals, change requests and incident resolutions.
Feedback from IFM business users, application business owners and IT colleagues on the effectiveness of cyber awareness and services.
Assessment by the Associate Director Information Security of overall performance outcomes described in the annual Performance Plan.
Contribution to the achievement of IFM Investors’ Five Year Strategic Goals.