Allens

Security Analyst

• Maintain accurate security risk assessments and review control effectiveness within the firm’s ISMS and risk register
• Identify and remediate vulnerabilities and compliance gaps across the IT environment and audit action plans
• Support audits, certifications and client due diligence activities, including responding to client questionnaires and tender requirements
• Provide security input into vendor selection, procurement and third‑party risk processes
• Monitor the evolving threat landscape and recommend practical control improvements
• Design and deliver security awareness and education initiatives tailored to different audiences
• Prepare clear, audience‑appropriate materials for executives, legal teams and technical stakeholders
• Collaborate with IT, legal and business teams to embed security into projects and governance forums
• Build effective working relationships with auditors, vendors and external security partners

Information Security Analyst

Security Engineer

• Design, implement and maintain secure cloud environments that protect systems and data
• Maintain secure cloud configurations and monitor compliance within cloud platforms and governance frameworks
• Identify and remediate cloud vulnerabilities and misconfigurations across production and development environments
• Provide security input into cloud vendor selection, procurement and third‑party risk processes
• Support cloud audits, certifications and client due diligence activities
• Develop and maintain cloud security improvement plans within governance and risk management frameworks
• Coordinate remediation of audit findings and risk treatment actions within agreed timeframes
• Work closely with IT, legal and business teams to embed cloud security into projects and governance forums
• Build effective working relationships with cloud vendors, auditors and external security partners

Information Security Analyst

Senior Cloud Security Engineer