Cyber M&A Lead — Infrastructure & Critical Assets

AON; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

Aon seeks an Associate Director to lead cyber M&A in the infrastructure sector from our London office. You will work across energy, transport, water, and digital assets, translating cyber findings into commercial impact for infrastructure funds and corporate buyers.

The role blends technical depth with deal‑oriented business development and client advisory work. You'll conduct due diligence, assess OT/IT environments, and develop pragmatic remediation and governance plans.

Qualifications

• Deep cyber security expertise across critical infrastructure environments such as energy, transport, water, digital and social infrastructure.
• Experience translating cyber findings into commercial and financial impact for investors and corporate clients.
• Proven ability to conduct OT/IT cybersecurity assessments, identify gaps, and propose remediation.

Responsibilities

• Conduct cyber due diligence on infrastructure investments and transactions.
• Assess IT and OT environments for cyber risks across sectors.
• Map security requirements to regulatory obligations and standards.
• Advise on cyber strategy, integration, and portfolio-wide improvement programmes.
• Support business development activities and client engagements.

Skills

Cyber security expertise

Infrastructure environments

IT & OT knowledge

Regulations & governance

OT cyber maturity assessments

Threat modeling & risk

Client-facing consulting

Education

CISSP

CISM

CRISC

ISO 42001

Job description

Aon seeks an Associate Director to lead cyber M&A in the infrastructure sector from our London office. You will work across energy, transport, water, and digital assets, translating cyber findings into commercial impact for infrastructure funds and corporate buyers.

The role blends technical depth with deal‑oriented business development and client advisory work. You'll conduct due diligence, assess OT/IT environments, and develop pragmatic remediation and governance plans.