North America Regional & Business Security Officer

Aon Corporation•Chicago, IL

43d•Hybrid

About The Position

North America Regional & Business Security Officer This is a hybrid role with the flexibility to work both virtually and from any of our US Aon offices. Aon is in the business of better decisions At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive team and we are passionate about helping our colleagues and clients succeed. What the day will look like Reporting directly to the Chief Information Security Officer (CISO), this hybrid role combines the responsibilities of the North America Regional Security Officer (RSO) and the Business Information Security Officer (BISO). The RSO portion of the role is focused specifically on managing operational security risks, governance, and oversight of global security controls within the region. In addition, the BISO responsibilities extend to representing the security needs of designated business units that operate across multiple regions globally. Serve as the primary liaison between the centralized Global Cybersecurity Services (GCS) organization, the North America Chief Operating Officer, and designated business leaders whose operations span multiple regions. Report directly to the Global Chief Information Security Officer, with dotted-line reporting to both the North America Chief Operating Officer (for the RSO portion) and relevant Business Unit leadership (for the BISO portion). Lead all aspects of and govern the implementation of security controls and services (e.g., Control Attestation, Service Delivery) for the region as well as assigned cross-regional business units. Risk Management: Identify, assess, and mitigate security risks within North America and assigned business units, employing audit and self-identified findings, metrics, and other service outputs. Incident Response: Lead the response to cybersecurity incidents affecting North America and assigned business units, including detection, containment, eradication, and recovery, in coordination with the global Aon Cybersecurity Command Center. Compliance and Governance: Ensure compliance with relevant laws, regulations, and industry standards for North America and assigned business units. Maintain documentation to prepare for audits and assessments. Stakeholder Collaboration: Work closely with North America regional leaders, business unit leaders, IT teams, and other partners to integrate security practices into business processes and IT operations. Provide reporting to leadership committees and Boards, as relevant. Service Delivery Management: Lead GCS service delivery issues and support GCS project implementations for North America and assigned business units. Contribute to the 'voice of the Business' in the development of GCS service improvement How this opportunity is different This highly visible role is responsible for embedding effective security controls at scale within North America, and for ensuring business units with multi-regional operations are adequately represented and supported in their security posture. As the trusted security lead, the RSO/BISO will present to North America regional leaders, business unit executives, regulators, and clients as needed, representing both regional and business perspectives.

Requirements

Ten plus years of IT or cyber experience
Five plus years of cybersecurity experience
Experience with Compliance assurance and Internal Audit practices
Strong written and verbal communication skills for effectively communicating with key stakeholders across regions and business units
Relevant cybersecurity certifications such as CISSP or CISM
Education: Bachelor's degree in relevant discipline or equivalent years of industry experience.

Responsibilities

Serve as the primary liaison between the centralized Global Cybersecurity Services (GCS) organization, the North America Chief Operating Officer, and designated business leaders whose operations span multiple regions.
Report directly to the Global Chief Information Security Officer, with dotted-line reporting to both the North America Chief Operating Officer (for the RSO portion) and relevant Business Unit leadership (for the BISO portion).
Lead all aspects of and govern the implementation of security controls and services (e.g., Control Attestation, Service Delivery) for the region as well as assigned cross-regional business units.
Risk Management: Identify, assess, and mitigate security risks within North America and assigned business units, employing audit and self-identified findings, metrics, and other service outputs.
Incident Response: Lead the response to cybersecurity incidents affecting North America and assigned business units, including detection, containment, eradication, and recovery, in coordination with the global Aon Cybersecurity Command Center.
Compliance and Governance: Ensure compliance with relevant laws, regulations, and industry standards for North America and assigned business units. Maintain documentation to prepare for audits and assessments.
Stakeholder Collaboration: Work closely with North America regional leaders, business unit leaders, IT teams, and other partners to integrate security practices into business processes and IT operations. Provide reporting to leadership committees and Boards, as relevant.
Service Delivery Management: Lead GCS service delivery issues and support GCS project implementations for North America and assigned business units. Contribute to the 'voice of the Business' in the development of GCS service improvement

Benefits

comprehensive benefits package
inclusive workforce
agile environment allows you to manage your wellbeing and work/life balance
two "Global Wellbeing Days" each year
continuous learning culture inspires and equips you to learn, share and grow
401(k) savings plan with employer contributions
employee stock purchase plan
consideration for long-term incentive awards at Aon's discretion
medical, dental and vision insurance
paid time off at the discretion of the employee and management in accordance with company policy and practices
Various other types of leaves of absence
paid sick leave as provided under state and local paid sick leave laws
short-term disability and optional long-term disability
health savings account
health care and dependent care reimbursement accounts
employee and dependent life insurance and supplemental life and AD&D insurance
optional personal insurance policies
adoption assistance
tuition assistance
commuter benefits
employee assistance program that includes free counseling sessions