IT Senior Security Manager

IFM Investors; New York (NY); Hybrid; USD 174,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

401k match

FSA

Life insurance

Disability insurance

EAP

Commuter benefits

Headspace

Job summary

IFM Investors, a global asset manager, is seeking a Senior Security Analyst in New York. You will contribute to delivering information security services, monitor events, diagnose incidents, and help implement enterprise-wide policies.

The role requires 10+ years in IT security, strong Microsoft Azure and networking knowledge, and experience with risk assessments. You’ll collaborate with IT teams and vendors in a hybrid, flexible environment with a competitive total rewards package.

Qualifications

• Minimum 10+ years in IT operations or related security field.
• Strong information security principles at a technical level.
• Experience with Microsoft Azure, Windows, networking.
• Knowledge of NIST and Essential Eight controls.

Responsibilities

• Monitor, diagnose, and respond to security events and incidents.
• Develop and enforce enterprise information security policies.
• Collaborate with IT teams and vendors to resolve issues.
• Lead risk assessments and vulnerability management.

Skills

Cyber security

Incident response

Vulnerability management

Vendor management

Stakeholder engagement

Cloud security (Azure)

Education

IT degree or related

Tools

Azure

Windows Server

NIST

Security tools

Job description

IFM Investors is a global asset manager, founded and owned by pension funds, with capabilities in infrastructure equity and debt, private equity, private credit, real estate and listed equities.

Our purpose is to invest, protect and grow the long-term retirement savings of working people. We believe healthy returns depend on healthy economic, environmental and social systems - and these are evolving on a scale never experienced before. To find opportunity, build value and meet the needs of future generations, you need scale, skill and expertise. That’s what IFM Investors has built up over 30 years. With assets under management of approximately $291.1 AUD billion (at 30 June 2026), we prioritise the interests of over 883 institutional investors worldwide. IFM operates from 17 offices across Australia, Europe, North America and Asia.

The Opportunity

At IFM, you’re not just part of an investment company – but an invested one. We see the work we do as the chance to take sustainable, responsible steps forward for millions of people around the world. So, we have made sure to create a workplace that’s inclusive, accountable and collaborative.

Where you’re given the opportunities to make a meaningful contribution and grow your skills. All while feeling valued and supported for who you are and what you bring to the team.

Along with the chance to make a meaningful, positive difference from day one, we offer a competitive salary and generous leave entitlements. Our hybrid and flexible approach can vary by team and role, it is built around trust. We encourage our people to manage their work life rhythm in a way that works best for them and their teams.

Business Overview

Our Operations, Data & Technology team collaborates across the business with a strong emphasis on designing solutions, increasing efficiency and reducing operational risks. The team consists of several areas of specialisation including:

• Transaction Management & Support
• Investment Operations & Client Service
• Business Transformation
• Investment Accounting & Tax Services
• Implementation
• Information Technology

The Role

The Senior Security Analyst will contribute to the successful delivery of information security services, including monitoring, diagnosing and resolving security events and incidents. The role provides technical expertise in recommending, developing, implementing and monitoring enterprise-wide information security policies and procedures, researching solutions to information security issues, and promoting information security awareness.

Key Responsibilities

• Strategic Planning- Understand the IFM Investors’ Business Plan.

Business Performance

• Understand IFM Investors’ long term revenue and profitability by understanding the metrics and targets.
• Understand and contribute to other business plan targets.

User Support

• Provide support, including troubleshooting system failures, pre-emptively identifying and resolving issues, and delivering user training.
• Perform administration tasks that enable business groups within IFM to carry out day-to-day activities.
• Manage vendors to support timely resolution of requests and problems.

Stakeholder Management

• Engage effectively with IFM users to understand reported issues and received requests and deliver the appropriate solution or service.
• Liaise with IT Managers, Team Leaders and colleagues regarding potential problems.
• Liaise with external software vendors and service providers to resolve issues as appropriate.

Policy and Process Management

• Comply with all policies and delegations applicable to the activities and decisions required in this role.

Functional Analysis

• Continually monitor networks, servers, endpoints and cloud applications.
• Provide cyber security subject matter expertise to internal and external stakeholders.
• Conduct vulnerability assessments, security audits and reviews.
• Analyse trends in operational incidents and raise problem tickets to address underlying causes.
• Proactively identify areas of risk, investigate root causes and propose mitigation strategies.
• Automate, improve and innovate cyber security activities.

Performance Measures

• Delivery of specific team and individual goals, change requests and incident resolutions.
• Feedback from IFM business users, application business owners and IT colleagues on the effectiveness of cyber awareness and services.
• Assessment by the Associate Director Information Security of overall performance outcomes described in the annual Performance Plan.
• Contribution to the achievement of IFM Investors’ Five Year Strategic Goals.

Your Background and Experience

Experience

• Experience in Investment Management or a related area.
• 10+ years’ experience providing IT operational support or in a related area.
• A mix of hands on technical and risk element experience

Qualifications

• Tertiary qualifications in IT or a related discipline.
• Preferably 10+ years’ IT experience, with strong experience in information security principles and concepts, particularly at a technical level.
• Strong background in Microsoft desktop/server, Microsoft Azure and cloud technologies, security, and networking technologies.
• Knowledge of security frameworks, standards and controls, such as NIST and Essential Eight.
• Exposure to developing information security policies and governance frameworks.
• Exposure to IT security operations in a large or complex organisation.
• In-depth experience or understanding of IT security tools and controls.

Business Knowledge

• Preferably an IT degree with exposure to cyber security processes and procedures.
• Demonstrated experience within an information systems environment.
• Knowledge of risk analysis, application and system software, including security software and hardware, and related capabilities and performance characteristics.
• Understanding of technical security safeguards and the principles, theories, techniques, practices, policies and procedures of information security.
• Knowledge of data communications and the concepts, theories and practices of advanced technologies.
• Strong written, oral and presentation skills.
• Demonstrated analytical, problem-solving and interpersonal skills.
• Proven experience with troubleshooting principles, methodologies and issue-resolution techniques.
• Confident engaging directly with users and vendors.
• Works effectively under time pressure to resolve issues.
• Stakeholder engagement and management.
• Procedure documentation and training.

Technical Knowledge

• Understanding of cyber security identification, prevention, detection, response, recovery and mitigation.
• Understanding of risk management frameworks.
• Excellent knowledge of Microsoft operating systems and applications in relation to best practice hardening and security configuration.
• Security knowledge across firewalls, web, email and endpoint protection.
• Knowledge of identity management tooling, information protection tools, data loss prevention technologies and cloud security posture management.

The anticipated base salary range for this position is listed below. Exact compensation amount may vary and will be determined by several components including but not limited to the individual’s experience, skills and qualifications. Total compensation for this role includes eligibility for a discretionary performance-based bonus.

$174,000-$220,000 USD

IFM also offers robust benefits offerings which include but is not limited to

• Comprehensive Medical, Dental and Vision plans (significant employer subsidy)
• 401(k) program with company match
• Flexible Savings Accounts (FSA)
• Life Insurance
• Long-Term Disability (LTD) and Short-Term Disability (STD) Insurance
• Employee Assistance Program (EAP)
• Commuter Benefits
• Headspace subscription

Ready to invest in what matters?

With IFM, that includes your own career.

IFM Investors is committed to promoting an inclusive culture where all employees are valued and recognised for their unique qualities, backgrounds, and perspectives. We champion all groups regardless of race, gender, religion, sexual orientation, age, disability, or family status. We are committed to providing individuals with disabilities reasonable adjustments to participate in the job application or interview process. Please contact us if you require specific support at any stage of the recruitment process at [e-mail]