Cybersecurity Director - UK Region

Cybersecurity Director - UK Region

Reporting to the EMEA Regional Security Officer, this role is key in managing the regional and solution line operational security risk levels within acceptable thresholds through leading remediation programs and deploying Global Cybersecurity Services (GCS) controls. The role acts as a primary contact for all Cybersecurity matters, requiring a broad understanding of security controls and their effective implementation in corporate environments. Strong relationship management skills across the region/sub-region are essential to facilitate business adoption.

As a Director within the Regional Security Office (RSO) service, you will be accountable for service delivery to the assigned region/sub-region and solution lines. Effective relationships with senior leadership are crucial to support regional business goals and maintain an effective security risk management regime aligned with a security risk mitigation strategy. The role involves presenting to local leaders, regulators, and clients as needed, with prior regulatory management experience required.

This highly visible role within Aon involves embedding effective security controls at scale across the firm. We seek a candidate who brings innovative ideas and a commitment to continuous learning, engaging actively with business leaders, IT executives, and external clients. The role demands gravitas, influence, and persuasiveness.

Aon values inclusiveness, collaboration, and a "better together" mindset to deliver distinctive value to colleagues and clients.

The RSO service connects regions, sub-regions, and solution lines to GCS to ensure appropriate security risk mitigation, providing the following services:

1. Cybersecurity Leadership:

• Provide cybersecurity reporting to leadership committees and boards.
• Represent cybersecurity to regulatory bodies.
• Own the cybersecurity strategy for the area, managing its delivery via GCS services and promoting local control adoption.
• Lead colleague security culture programs.
• Represent the region/sub-region in security incident management.
• Manage remediation efforts, e.g., internal audit findings.
• Oversee cybersecurity compliance and conduct management.

1. Cybersecurity Risk Management:

• Manage a cybersecurity risk committee to support cyber risk management.
• Track remediation of audit and compliance findings.
• Review cybersecurity metrics and lead remediation programs.
• Lead or sponsor cybersecurity initiatives.
• Coordinate with Data Privacy to ensure security controls are in place.

1. GCS Service Delivery Management:

• Manage GCS service escalations.
• Support GCS project implementations.
• Contribute to service enhancement feedback.
• Manage cybersecurity intake and relationships.
• Support regulatory and compliance assessments.
• Assist with continuity and disaster recovery planning.
• Support data governance initiatives.

1. Client Support/Escalation Management:

• Represent cybersecurity in client calls and escalations.
• Provide security advice, guidance, and policy support to clients.
• Facilitate engagement with GCS services through proper channels.

• Broad cybersecurity knowledge and experience in large, complex environments.
• Solid understanding of domains like application security, vulnerability management, network and cloud security, incident management, physical security, supplier risk, and cyber awareness.
• Experience in effective cyber risk management.
• Ability to influence and build relationships with diverse stakeholders, including C-level executives.
• Exceptional communication skills for technical and non-technical audiences.
• Regulatory management experience.
• Experience with compliance assurance and audits is desirable.
• Security certifications such as CISSP or CISM are advantageous.
• Experience with standards like Sarbanes Oxley (404), ISO27001, and Cyber Essentials+.

We offer comprehensive benefits, promote diversity, and foster an inclusive, agile environment supporting wellbeing and work/life balance, including two "Global Wellbeing Days" annually. Our culture encourages continuous learning and growth, making colleagues more connected, relevant, and valued. Aon is committed to an inclusive workplace, providing equal opportunities and reasonable accommodations for applicants with disabilities. For more info, contact .