Cyber Manager - Advisory

US Broking CyQu Advisory Manager

This will be a hybrid role based out of our Chicago, Los Angeles, San Francisco, Irvine, Dallas, Chicago, New York or Miami office locations.

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

• Support broking clients and potential new broking relationships through the evaluation of security programs and facilitating Aon proprietary assessment (CyQu) report discussions; conducting reviews of potential cybersecurity vulnerabilities; evaluating and analyzing appropriate actions that can enable more effective risk management of cyber risk, and more effective cyber risk transfer solutions.
• Collaborate with Aon's advisory resources to recommend strategies to reduce security risks across a cybersecurity program-- cloud services, on-premise infrastructure, servers, network devices, user endpoints, and employee awareness.
• Understand existing client processes and controls and associated risks with respect to electronic and non-electronic information security.
• Evaluate and advise clients regarding strategies to defend against threats such as ransomware, nation-state attacks, and insider threat when more sophisticated advisory solutions are not viable (lack of adequate budget, client resources, or priority) to improve cyber security posture, reinsurance viability, coverage, etc.
• Assist with various practice client engagement pursuit initiatives, including the pre-sales scoping and development of client proposals for advisory, testing, and threat intelligence services.
• Discuss IT network and security architectures as they relate to handling identities and access privileges, delegated administration models, workflow and access control models.
• Formulate executive level recommendations related to Information Security strategy.
• Improve broking team competence by answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.

• 5+ years of varied IT security experience to include risk management, security program governance, vulnerability management, incident response, and infrastructure support.
• Recent consulting experience with a mid-to-large consulting firm/practice would be a plus.
• Previous hands‑on experience with at least 1 of the following:
  • Identity & Access Management
  • Enterprise or Cloud environment security
  • Vulnerability Management
  • Cyber-Incident Response
• Understanding and experience with cyber security insurance coverage against data breach liability; notification of customers; protection, restoration, and recovery of critical information, assessing third parties, repairing damaged systems, and ensuring business continuity
• Shown success in working in a team as well as independently and exhibit follow‑through to understand root causes of issues.
• Excellent IT project management and time management skills. Capable of tracking and completing numerous parallel activities, work efficiently and independently with minimal direction.
• Ability to work optimally in a multi-service area environment and across all organizational levels, where flexibility, collaboration, and adaptability are important.
• Ability to communicate optimally, in both written and verbal formats, with senior executive-level leaders in pre‑sales support and relationship management activities.
• Willingness to travel.
• Fluency in Spanish would be plus

Bachelor's degree in computer science, information technology, or…