Technology Business Process Analyst

Aon Corporation•Chicago, IL

5h•$93,500 - $130,000•Remote

About The Position

Want to shape how a leading organization manages technology risk and controls? Are you excited to work at the intersection of process and data? Step into a role where your risk and control expertise turns into real, visible change across the business. This is a fully remote role based in the United States, with the flexibility to work virtually. Aon is in the business of better decisions At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive team, and we are passionate about helping our colleagues and clients succeed. What the day will look like In this role, you’ll help shape how technology work is organized, monitored, and improved across the organization. You’ll partner with technology teams and key stakeholders to bring structure, clarity, and transparency to how we manage risk, support audits, and enhance our ways of working. How this opportunity is different In this role, you’ll sit at the center of technology and risk, helping shape how controls are defined, implemented, and communicated across the organization. Rather than operating in a narrow functional lane, you’ll influence end-to-end risk and control practices and how they’re shared with key partners. Shape the control environment, not just execute it – You won’t simply follow a pre-defined playbook; you’ll help design and refine the technology control library, influence how controls are applied, and directly support how risk is managed across the organization. Own clear, practical reporting – This role is responsible for creating and maintaining reporting and dashboards on risk and control health, giving teams straightforward insight into where things are working well and where attention is needed. Bridge between technology and risk partners – You will work across technology teams and control owners—coordinating activities, aligning expectations, and helping everyone work from a single, consistent view of risks and controls. End-to-end view of the risk lifecycle – From control design and assessment, through issue management and remediation, to reporting and ongoing improvements, you’ll see and support the full lifecycle rather than a narrow slice. Opportunity to build scalable ways of working – You’ll help develop and refine standard templates, processes, and reporting that can scale as the organization grows, creating simple, repeatable ways of working. Blend of strategic and hands-on work – The role combines input into how risks and controls are designed with day-to-day ownership of processes, communications, and reporting—suited to someone who enjoys both planning and execution.

Requirements

Experience in technology risk management, IT controls, internal audit, or a related GRC function.
Working knowledge of common technology controls (e.g., access management, change management, backup/recovery, SDLC) and how they show up in risk processes.
Experience supporting internal or external audits (e.g., walkthroughs, coordinating evidence requests, responding to findings, tracking remediation activities).
Strong analytical skills with the ability to identify process/control gaps and recommend practical improvements.
Experience building or maintaining reports or dashboards, including summarizing key insights for senior audiences.
Clear written and verbal communication skills; able to translate technical and risk concepts into plain actionable language.
Demonstrated ability to manage multiple tasks, partners, and deadlines with strong attention to detail and follow‑through.
Familiarity with GRC tools (e.g., ServiceNow) and frameworks such as SOC 2, ISO 27001, COBIT or NIST
Bachelor’s degree in Business, Information Systems, Risk/Compliance, or related field; or equivalent work experience.

Responsibilities

Modify and maintain a central library of technology controls, ensuring they are clearly defined, aligned to key risks and requirements, and applied consistently across systems and processes.
Work with control owners and technology teams to review how controls are designed and how they operate, and suggest improvements where needed to reduce risk.
Collaborate with internal audit and other collaborators on planning, evidence needs, and follow‑up items to help keep risk, control, and audit activities coordinated.
Develop and deliver communications and training to help teams understand and apply risk and control processes in a consistent way.
Build and maintain reporting on risks, controls, and follow‑up actions, including clear summaries and visuals tailored to different collaborator needs.
Use experience in risk and/or technology risk management to provide practical input on control design, risk assessment, and remediation approaches.
Identify and prioritize process pain points and help design practical, repeatable process improvements.

Benefits

comprehensive benefits package
agile, inclusive environment allows you to manage your wellbeing and work/life balance
two “Global Wellbeing Days” each year
variety of working style solutions
continuous learning culture inspires and equips you to learn, share and grow
401(k) savings plan with employer contributions
employee stock purchase plan
consideration for long-term incentive awards at Aon’s discretion
medical, dental and vision insurance
various types of leaves of absence
paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year
paid sick leave as provided under state and local paid sick leave laws
short-term disability and optional long-term disability
health savings account
health care and dependent care reimbursement accounts
employee and dependent life insurance and supplemental life and AD&D insurance
optional personal insurance policies
adoption assistance
tuition assistance
commuter benefits
employee assistance program that includes free counseling sessions