Jason Lee

I’m an Information Security Manager and information security leader with a track record of supporting cybersecurity and risk management across many distinct industries. I lead and develop teams that translate client requirements into comprehensive, scalable solutions.

At Aon Cyber Solutions, I’ve led a Senior Consultant role supporting the Cyber Risk & Compliance team and delivered 90+ cybersecurity maturity assessments, due diligence reviews, and threat simulations for Fortune 100 companies. I guide executive and technical leadership through strategic roadmaps and deliverable reports using frameworks including NIST CSF, NIST 800-53, HIPAA (NIST 800-66), CMMC, SOC 2, GDPR, ISO 27001/27002, and PCI DSS.

I also manage high-stakes program work—most notably an 18-month surveillance order mandated by CFIUS, followed by advice on overhauling and reconstructing a client’s data protection program. In parallel, I design third-party risk management programs, including questionnaires, risk-based assessment strategies, and secure vendor onboarding decisions.

Earlier in my career, I specialized in secure software development lifecycle work aligned to OWASP Software Assurance Maturity Model (SAMM), led security risk assessments with actionable remediation paths for technical and non-technical teams, and supported digital forensics and incident response. I’ve executed a data loss prevention solution RFP and conducted forensic investigations across civil, criminal, and business cases to support legal proceedings and corporate incident response.