Aon Corporation

Compensation

Full Description

Are you an Information Security Officer who has experience operating inside a large company? This could be an interesting opportunity for you! The Information Security Officer (ISO) will support North America within the Regional Security Office (RSO), with a focused directive on advancing the cybersecurity posture of the NFP business, driving secure integration of mergers and acquisitions (M&A), and ensuring alignment with New York Department of Financial Services (NYDFS) regulatory requirements. This role works with the North America Regional Security Officer to manage regional cybersecurity risk within acceptable levels. It involves accomplishing targeted remediation programs and deploying Global Cybersecurity Services (GCS) controls. Serving as the main contact for cybersecurity across NFP and M&A activities, the ISO must understand security controls and regulatory expectations well. They also need to apply these effectively in complex, evolving environments. The role also demands strong collaborator engagement to drive adoption of security standards and ensure consistent, compliant execution across the portfolio. Aon is in the business of better decisions At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one engaged team and we are passionate about helping our colleagues and clients succeed! What the day will look like As an Information Security Officer, you will be accountable for cybersecurity service delivery across North America, with a focus on supporting the NFP business, M&A integration activities, and NYDFS-regulated entities. The role requires building strong relationships with senior leadership to enable achievement of business objectives while operating an effective security risk management program aligned to defined risk mitigation strategies and regulatory expectations. As a trusted security leader, you will represent the organization in engagements with business leaders, regulators, and clients as needed. Prior experience managing regulatory requirements—particularly within highly regulated environments such as NYDFS—is essential. This is a highly transparent role within Aon to be able to embed effective security controls at scale within the firm. We are looking for you to bring new ideas and dedication toward continual learning. You will stay effectively engaged with business leaders, IT executives and external clients. Key Responsibilities The RSO service provides a regional / sub-regional / solution line connection to GCS to ensure they are appropriately leveraged to mitigate security risks and provides the following security services: Cybersecurity Leadership: Provide Cybersecurity reporting to leadership committees and Boards. Represent Cybersecurity to appropriate Regulatory bodies. Be responsible for the Cybersecurity strategy for the designated region, manage its delivery through the use of GCS capabilities and accelerate local control adoption. Take charge of the colleague security culture program. Represent the region / sub-region in the Security Incident Management process. Remediation Management, e.g. Internal Audit findings, Cybersecurity Compliance and Conduct management. Cybersecurity Risk Management: Leading a Cybersecurity Risk committee to support cyber risk management. Track remediation of Cybersecurity Audit and Compliance findings. Review Cybersecurity Metrics and lead remediation programs within the area / sub-area. Lead or Sponsor Cybersecurity initiatives within area of accountability. In conjunction with Data Privacy ensure necessary security controls are in place. Global Cyber Security Service Delivery Management: Handle GCS Service delivery critical issues. Support GCS project implementation within the assigned area of accountability. Make valuable contributions to the ‘voice of the Business’ in development of GCS service improvements. Cybersecurity Intake & Relationship Management, regulatory & compliance assessment support Continuity and disaster recovery support along with data governance support. Client Support and Escalation Management: Represent Cybersecurity on Client calls or critical issues. Provide first line security advice, mentorship and Policy and Standard support to Client teams. Support the engagement of GCS services via the correct process. Skills and experience that will lead to success 8 or more years of broad Cybersecurity knowledge and experience of implementing and operating an effective control regime in a large, complex corporate environment. Insurance or financial services is required. Solid knowledge and understanding of Cybersecurity domains, including; application security, vulnerability management, network and cloud security, security operations (incident management), supplier risk management and cyber awareness. Experience of effective Cyber Risk Management within a large corporate environment. Encouraging positive relationships by influencing and building effective relations with individuals at various levels of seniority, up to and including C-level. Outstanding communication to communicate to a wide range and seniority of contacts, including technical and non-technical audiences. Demonstrable regulatory management experience. Experience of Compliance assurance and Audit practice is desirable. Security certification (CISSP,CISM) is an advantage. Understanding and knowledge in delivering compliance standards, including; ISO27001, SOC 2, NYDFS For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances. Aon is not accepting unsolicited resumes from search firms for this position. If you are a search firm, you will not be compensated in any way for your submission of a candidate, even if Aon hires that candidate. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time. Pay Transparency Laws: The salary range for this position (intended for U.S. applicants) is $140,000 to $170,000 annually. The actual salary will vary based on applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant’s geographic location. This position is eligible to participate in one of Aon’s annual incentive plans to receive an annual discretionary bonus in addition to base salary. The amount of any bonus varies and is subject to the terms and conditions of the applicable incentive plan. Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon’s discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies. How we support our colleagues In addition to our comprehensive benefits package, we encourage an inclusive workforce. Plus, our agile environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions for our colleagues as well. Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued. Aon values an innovative and inclusive workplace where all colleagues feel empowered to be their authentic selves. Aon is proud to be an equal opportunity workplace. Aon provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. We are committed to providing equal employment opportunities and fostering an inclusive workplace. If you require accommodations during the application or interview process, please let us know. You can request accommodations by emailing us at ReasonableAccommodations@Aon.com or your recruiter. We will work with you to meet your needs and ensure a fair and equitable experience. #LI-KH1 2582771