Senior Security Analyst, IT

About Us

IFM Investors is a global asset manager, founded and owned by pension funds, with capabilities in infrastructure equity and debt, private equity, private credit, real estate and listed equities.

Our purpose is to invest, protect and grow the long-term retirement savings of working people. We believe healthy returns depend on healthy economic, environmental and social systems - and these are evolving on a scale never experienced before. To find opportunity, build value and meet the needs of future generations, you need scale, skill and expertise. That’s what IFM Investors has built up over 30 years.

With assets under management of approximately $291.1 AUD billion (at 30 June 2026), we prioritise the interests of over 883 institutional investors worldwide. IFM operates from 17 offices across Australia, Europe, North America and Asia.

The Opportunity

At IFM, you’re not just part of an investment company – but an invested one. We see the work we do as the chance to take sustainable, responsible steps forward for millions of people around the world.

So, we have made sure to create a workplace that’s inclusive, accountable and collaborative. Where you’re given the opportunities to make a meaningful contribution and grow your skills. All while feeling valued and supported for who you are and what you bring to the team.

Along with the chance to make a meaningful, positive difference from day one, we offer a competitive salary and generous leave entitlements. Our hybrid and flexible approach can vary by team and role, it is built around trust. We encourage our people to manage their work life rhythm in a way that works best for them and their teams.

Business Overview

Our Operations, Data & Technology team collaborates across the business with a strong emphasis on designing solutions, increasing efficiency and reducing operational risks. The team consists of several areas of specialisation including:

• Transaction Management & Support
• Investment Operations & Client Service
• Investment Risk & Execution Oversight
• Business Transformation
• Investment Accounting & Tax Services
• Implementation
• Information Technology

The Role

The Senior Security Analyst will contribute to the successful delivery of information security services, including monitoring, diagnosing and resolving security events and incidents. The role provides technical expertise in recommending, developing, implementing and monitoring enterprise-wide information security policies and procedures, researching solutions to information security issues, and promoting information security awareness.

Key Responsibilities

• Strategic Planning- Understand the IFM Investors’ Business Plan.

Business Performance

• Understand IFM Investors’ long term revenue and profitability by understanding the metrics and targets.
• Understand and contribute to other business plan targets.

User Support

• Provide support, including troubleshooting system failures, pre-emptively identifying and resolving issues, and delivering user training.
• Perform administration tasks that enable business groups within IFM to carry out day-to-day activities.
• Manage vendors to support timely resolution of requests and problems.

Stakeholder Management

• Engage effectively with IFM users to understand reported issues and received requests and deliver the appropriate solution or service.
• Liaise with IT Managers, Team Leaders and colleagues regarding potential problems.
• Liaise with external software vendors and service providers to resolve issues as appropriate.

Policy and Process Management

• Comply with all policies and delegations applicable to the activities and decisions required in this role.

Functional Analysis

• Continually monitor networks, servers, endpoints and cloud applications.
• Provide cyber security subject matter expertise to internal and external stakeholders.
• Conduct vulnerability assessments, security audits and reviews.
• Analyse trends in operational incidents and raise problem tickets to address underlying causes.
• Proactively identify areas of risk, investigate root causes and propose mitigation strategies.
• Automate, improve and innovate cyber security activities.

Performance Measures

• Delivery of specific team and individual goals, change requests and incident resolutions.
• Feedback from IFM business users, application business owners and IT colleagues on the effectiveness of cyber awareness and services.
• Assessment by the Associate Director Information Security of overall performance outcomes described in the annual Performance Plan.
• Contribution to the achievement of IFM Investors’ Five Year Strategic Goals.

Your Background and Experience

Experience

• Experience in Investment Management or a related area.
• 10+ years’ experience providing IT operational support or in a related area.

Qualifications

• Tertiary qualifications in IT or a related discipline.
• Preferably 10+ years’ IT experience, with strong experience in information security principles and concepts, particularly at a technical level.
• Strong background in Microsoft desktop/server, Microsoft Azure and cloud technologies, security, and networking technologies.
• Knowledge of security frameworks, standards and controls, such as NIST and Essential Eight.
• Exposure to developing information security policies and governance frameworks.
• Exposure to IT security operations in a large or complex organisation.
• In-depth experience or understanding of IT security tools and controls.

Business Knowledge

• Preferably an IT degree with exposure to cyber security processes and procedures.
• Demonstrated experience within an information systems environment.
• Knowledge of risk analysis, application and system software, including security software and hardware, and related capabilities and performance characteristics.
• Understanding of technical security safeguards and the principles, theories, techniques, practices, policies and procedures of information security.
• Knowledge of data communications and the concepts, theories and practices of advanced technologies.
• Strong written, oral and presentation skills.
• Demonstrated analytical, problem-solving and interpersonal skills.
• Proven experience with troubleshooting principles, methodologies and issue-resolution techniques.
• Confident engaging directly with users and vendors.
• Works effectively under time pressure to resolve issues.
• Stakeholder engagement and management.
• Procedure documentation and training.

Technical Knowledge

• Understanding of cyber security identification, prevention, detection, response, recovery and mitigation.
• Understanding of risk management frameworks.
• Excellent knowledge of Microsoft operating systems and applications in relation to best practice hardening and security configuration.
• Security knowledge across firewalls, web, email and endpoint protection.
• Knowledge of identity management tooling, information protection tools, data loss prevention technologies and cloud security posture management.