> Markdown version of [/jobs/ext/2951799-associate-director-cyber-m-a-infrastructure-sector](https://www.wearedevelopers.com/jobs/ext/2951799-associate-director-cyber-m-a-infrastructure-sector). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Director - Cyber M&A - Infrastructure Sector - **Company:** Aon plc. - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing Security, Cyber Security, Software Engineering, Active Optical Networks, Operational Systems - **Published:** September 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=cc74e05ce62ebe7a ## About the Role Do you bring deep cyber technical knowledge with the ability to understand and articulate cyber security risks and trends across critical national infrastructure, including the threat vectors impacting energy, transport, water, digital infrastructure and social infrastructure assets? Do you have client-facing skills that allow you to translate technical and operational technology (OT) findings into commercial and financial impact for infrastructure funds and corporate investors across the M&A lifecycle? If so, then we would love to hear from you in connection with these new opportunities based within Aon's multifaceted M&A Transactions Solutions (AMATS) practice, situated within our flagship London office!, For success in this role, we're looking for someone who can demonstrate: * Strong cyber security expertise within critical infrastructure environments, with experience across sectors such as energy, transportation, telecommunications, water, or social infrastructure. * A deep understanding of cyber security frameworks, regulations, and governance, including NIST CSF, IEC 62443, NIS2, KRITIS, NERC, and other relevant standards. * Experience working across both IT and Operational Technology (OT) environments, with a strong appreciation of the unique risks, threats, and controls associated with each. * Proven capability in conducting OT cyber maturity assessments and audits, identifying control gaps and developing practical remediation and resilience strategies. * Broad technical cyber security knowledge, spanning areas such as security architecture, OT networks, cloud security, AI, data protection, security operations, and secure software development. * Strong client-facing and consulting skills, with the ability to develop compelling proposals, lead collaborator discussions, and deliver value to infrastructure operators, investors, and corporate clients. Desirable: Industry-recognised certifications such as CISSP, CISM, CRISC, or ISO 42001. ## Description In this wide and varied role, with a specific focus on the infrastructure sector, your key responsibilities will include: * Conduct cyber due diligence on infrastructure investments, supporting acquisitions, carve-outs and wider transaction activity. * Assess IT and Operational Technology (OT) environments across sectors such as energy, transport, water, digital and social infrastructure. * Identify cyber security risks, evaluate maturity levels and develop practical remediation recommendations. * Map security requirements, regulatory obligations and minimum security standards to create robust improvement plans. * Support business development activities, including client pitches, proposals and onboarding for infrastructure investors and corporate clients. * Work closely with senior collaborators and clients, providing advice on cyber strategy, integration, carve-outs, incident response and portfolio-wide cyber improvement programmes. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enterprise Linux as Container Images](https://www.wearedevelopers.com/videos/1610-enterprise-linux-as-container-images) - [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers) - [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/videos/1638-get-security-done-streamlining-application-security-with-aikido) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)