About the job

‍

‍We’re hiring!

Aon are currently recruiting an Information Security Director to join our team in London. Reporting to the Global Business Security Officer, this role is key in leading the regional and solution line operational security risk level to within acceptable levels via leading remediation programs and deployment of GSS controls. The role requires a broad understanding of security controls, their effective implementation within corporate environments coupled with good relationship management skills to enable business adoption.

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organisation, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

What The Day Will Look Like

• Provide Security reporting to leadership committees and Boards.
• Represent Security to appropriate Regulatory bodies.
• Own the Security strategy for the assigned area and lead its delivery via leverage of GSS services.
• Running a Security Risk committee to manage Security Risks.
• Track remediation of Security Audit and Compliance findings.
• Review Security Metrics and lead remediation programs.
• Lead or Sponsor Security initiatives within area of accountability
• In conjunction with Data Privacy ensure necessary security controls are in place.

Responsibility for working in accordance with the Aon UK Limited Risk Management Framework, and compliance with the Aon UK Limited policies, including participation in the management of risks (including completion of mandatory training) that may adversely affect the business, interests or reputation of any Group Company.

Skills And Experience That Will Lead To Success

• Strong Information Security knowledge and experience of implementing and operating an effective control regime
• Knowledge of Physical and Personnel security principals and best practice.
• Experience if Compliance assurance and Audit practice is desirable.
• Security certification (CISSP,CISM) an advantage
• Broad experience of Information Security domains and operation
• Understanding and experience of delivering Sarbanes Oxley (404) compliance.

‍