Cybersecurity Manager – UK region - Global Cybersecurity Services (EMEA Regional Security Office [PL]) Aon is currently recruiting a Cybersecurity Manager to join our team. This role will support the UK region (UK, Ireland, South Africa and Mauritius) for all matters related to Cybersecurity. The role will lead local initiatives, run an appropriate security risk management regime, and provide technical expertise to manage Cyber Security risk within the sub-region. The role will also leverage Global Cybersecurity Services (GCS) and local initiatives in partnership with business leadership to support the sub-region / country / solution line business. The Regional Security Officer service provides a Regional / Solution Line / Business Level (BU) security connection to the core Global Cybersecurity Services to ensure they are appropriately leveraged to mitigate security risks and provide the following security services at a sub-region/country/solution line level. Aon is in the business of better decisions At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive, complementary team, and we are passionate about helping our colleagues and clients succeed. What the day will look like This Cybersecurity Manager role will support the UK region in EMEA and will deliver the following Regional Security Office (RSO) services: Cybersecurity Leadership: + Support Cybersecurity reporting to leadership committees and Boards. + Represent Cybersecurity to appropriate Regulatory bodies, as appropriate. + Support the Cybersecurity strategy for the assigned area, manage its delivery via leverage of GCS services and accelerate local control adoption. + Support the colleague security culture programme. + Remediation Management, e.g. Internal Audit findings. + Cybersecurity Compliance and Conduct management. Cybersecurity Risk Management: + Support the management of the Cybersecurity Risk Committee to support cyber risk management. + Track remediation of Cybersecurity Audit and Compliance findings. + Review Cybersecurity Metrics and lead remediation programs within the region / sub-region. + Support Cybersecurity initiatives within area of accountability + In conjunction with Data Privacy ensure necessary security controls are in place. GCS Service Delivery Management: + Assist in managing GCS Service delivery blocking issues. + Support GCS project implementation within the assigned area of accountability. + Contribute to the ‘voice of the Business’ in development of GCS service enhancements. + Cybersecurity Intake & Relationship Mgmt + Regulatory & Compliance Assessment Support + Continuity and Disaster Recovery Support + Data Governance Support. Client Support/Escalation Management: + Represent Cybersecurity on Client calls or critical issues, as required. + Provide first line security advice, guidance and Policy and Standard support to Client teams, as appropriate. + Support the engagement of GCS services via the correct process. Note: this role does not have any people management responsibilities. Skills and experience that will lead to success + Broad Cybersecurity knowledge and experience of implementing and operating an effective control regime in a large, complex corporate environment. + Solid knowledge and understanding of Cybersecurity domains, including; application security, vulnerability management, network and cloud security, security operations (incident management), physical security, supplier risk management and cyber awareness. + Experience of effective Cyber Risk Management within a large corporate environment. + Fostering strong partnerships by influencing and building effective relations with diverse stakeholders at a range of seniority. + Strong communication skills, able to effectively communicate with a diverse range and seniority of collaborators, including technical and non-technical audiences. + Experience of UK or EU-based regulators is desirable. + Experience of Compliance assurance and Audit practice is desirable. + Security certification (CISSP, CISM) is an advantage. + Understanding and experience of delivering compliance standards, including; Sarbanes Oxley (404), ISO27001 and Cyber Essentials + How we support our colleagues In addition to our comprehensive benefits package, we encourage an inclusive workforce. Plus, our agile environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions for our colleagues as well. Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative and inclusive workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com #LI-Mid-Seniorlevel #LI-Hybrid #technology&security #LI-JB3 2566088 Cybersecurity Manager – UK region - Global Cybersecurity Services (EMEA Regional Security Office [PL]) Aon is currently recruiting a Cybersecurity Manager to join our team. This role will support the UK region (UK, Ireland, South Africa and Mauritius) for all matters related to Cybersecurity. The role will lead local initiatives, run an appropriate security risk management regime, and provide technical expertise to manage Cyber Security risk within the sub-region. The role will also leverage Global Cybersecurity Services (GCS) and local initiatives in partnership with business leadership to support the sub-region / country / solution line business. The Regional Security Officer service provides a Regional / Solution Line / Business Level (BU) security connection to the core Global Cybersecurity Services to ensure they are appropriately leveraged to mitigate security risks and provide the following security services at a sub-region/country/solution line level. Aon is in the business of better decisions At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive, complementary team, and we are passionate about helping our colleagues and clients succeed. What the day will look like This Cybersecurity Manager role will support the UK region in EMEA and will deliver the following Regional Security Office (RSO) services: Cybersecurity Leadership: + Support Cybersecurity reporting to leadership committees and Boards. + Represent Cybersecurity to appropriate Regulatory bodies, as appropriate. + Support the Cybersecurity strategy for the assigned area, manage its delivery via leverage of GCS services and accelerate local control adoption. + Support the colleague security culture programme. + Remediation Management, e.g. Internal Audit findings. + Cybersecurity Compliance and Conduct management. Cybersecurity Risk Management: + Support the management of the Cybersecurity Risk Committee to support cyber risk management. + Track remediation of Cybersecurity Audit and Compliance findings. + Review Cybersecurity Metrics and lead remediation programs within the region / sub-region. + Support Cybersecurity initiatives within area of accountability + In conjunction with Data Privacy ensure necessary security controls are in place. GCS Service Delivery Management: + Assist in managing GCS Service delivery blocking issues. + Support GCS project implementation within the assigned area of accountability. + Contribute to the ‘voice of the Business’ in development of GCS service enhancements. + Cybersecurity Intake & Relationship Mgmt + Regulatory & Compliance Assessment Support + Continuity and Disaster Recovery Support + Data Governance Support. Client Support/Escalation Management: + Represent Cybersecurity on Client calls or critical issues, as required. + Provide first line security advice, guidance and Policy and Standard support to Client teams, as appropriate. + Support the engagement of GCS services via the correct process. Note: this role does not have any people management responsibilities. Skills and experience that will lead to success + Broad Cybersecurity knowledge and experience of implementing and operating an effective control regime in a large, complex corporate environment. + Solid knowledge and understanding of Cybersecurity domains, including; application security, vulnerability management, network and cloud security, security operations (incident management), physical security, supplier risk management and cyber awareness. + Experience of effective Cyber Risk Management within a large corporate environment. + Fostering strong partnerships by influencing and building effective relations with diverse stakeholders at a range of seniority. + Strong communication skills, able to effectively communicate with a diverse range and seniority of collaborators, including technical and non-technical audiences. + Experience of UK or EU-based regulators is desirable. + Experience of Compliance assurance and Audit practice is desirable. + Security certification (CISSP, CISM) is an advantage. + Understanding and experience of delivering compliance standards, including; Sarbanes Oxley (404), ISO27001 and Cyber Essentials + How we support our colleagues In addition to our comprehensive benefits package, we encourage an inclusive workforce. Plus, our agile environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions for our colleagues as well. Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative and inclusive workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We welcome applications from all and provide individuals with disabilities with reasonable adjustments to participate in the job application, interview process and to perform essential job functions once onboard. If you would like to learn more about the reasonable accommodations we provide, email ReasonableAccommodations@Aon.com #LI-Mid-Seniorlevel #LI-Hybrid #technology&security #LI-JB3