Description

Job description: This Defense and Transformation service line Manager role will be part of a cross-functional Proactive Security Services team that manages, implements, and delivers various Security Advisory engagements for our clients. Aon s Cyber Security Advisory Consulting is client-facing management consulting function. Our Proactive Advisory teams, within this business unit, specialize in the development and implementation of customized cybersecurity solutions for clients , in fee-for-service projects to mitigate risks and prepare companies in advance of a cyber incident. Our Advisory services lines include Cybersecurity Organizational Design and Strategy; Risk and Compliance; Defense and Transformation; Resilience; Data Security and Privacy; and M&A/Private Equity. As part of these service areas and within a shared resource model, your day-to-day contributions are focused on translating clients cybersecurity requirements and customizing and implementing security solutions into specific guidance and insights to inform strategies, operations, and tactics. Your delivery objective will be to identify and develop the security solutions for clients using your current knowledgebase and interpersonal skills along with our company products and technical tools to minimize security vulnerabilities and improve the effectiveness of appropriate security controls. These project-based initiatives can involve working at customer sites, working from an Aon office, or remote/home. Performance is typically measured by utilization (i.e., billable hours), role-based metrics, and the successful delivery of agreed solutions within budgeted hours. The location is flexible.

Role and Responsibilities

• Job Responsibilities: This role will be part of a multi-functional Proactive Security Services team that leads, carries out, and delivers various Security Advisory engagements for our clients. The responsibilities of this position include but are not limited to the following: Lead and manage delivery teams that conduct enterprise-level technical security assessments for various clients. Performing blue teaming / purple teaming and technical security assessments against on premise and public/hybrid/private cloud environments. Build and carry out Breach and Attack Simulations programs for clients to assess cyber defenses and provide improvement recommendations. Enhance and scale traditional defensive security programs for clients against ransomware, APT, and insider threat scenarios. Assess IT network and security architectures as they relate to managing identities and access privileges, delegated administration models, workflow and access control models. Develop client security programs by reviewing existing programs; conducting comprehensive reviews of threats; evaluating and analyzing relevant data points. Recommend strategies to defend against threats such as ransomware, nation-state attacks, and insider threat. Lead engagements and support team members during client engagement execution, ensuring timely progress, achievement of objectives, and delivery quality. Enhance team competence by answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members. Track emerging security practices and contribute to building internal processes.