Jason Lee

GRC and cybersecurity risk professional with consulting experience advising Fortune 100 clients across healthcare, financial services, technology, and industrial sectors. CISM-certified, with hands-on expertise applying NIST CSF, ISO 27001/27002, SOC 2, HIPAA, PCI DSS, SOX, GDPR, and NYDFS to build and mature governance, risk, and compliance programs. Brings quantitative risk methodologies (FAIR, CRQM) and a track record of translating technical risk into executive-level strategy.

Senior Consultant, Cyber Risk & Compliance Team at Aon Cyber Solutions (2021-03 – 2025-06)

• Conducted 90+ cybersecurity maturity assessments, due diligence reviews, and threat simulations for Fortune 100 companies in healthcare, financial, technology, and industrial sectors, applying NIST CSF, NIST 800-53, NIST 800-66 (HIPAA), CMMC, SOC 2, GDPR, ISO 27001/27002, SOX, NYDFS, and PCI DSS
• Defined, developed, and presented deliverable reports and strategic roadmaps to executives and senior technical leadership
• Applied FAIR-aligned quantitative risk methodologies and CRQM solutions to prioritize remediation based on financial exposure
• Mitigated emerging cybersecurity risks introduced by LLMs and agentic AI systems, aligning deployments with NIST AI RMF
• Managed an 18-month CFIUS-mandated surveillance order and advised the overhaul of the client's data protection program
• Led client engagements end-to-end: directed a delivery team through assessment work, partnered with the sales team on pre-engagement scoping, and coordinated with clients and firm leadership through project close
• Owned project scheduling and management for nearly all engagements following standard PM lifecycle practices, integrating into clients' own PM structures and workflows; applied Agile and other project management methodologies as needed per engagement
• Mentored and trained junior consultants in risk management, report writing, and presentation skills

Consultant, Proactive Advisory Team at Aon Cyber Solutions (2018-05 – 2021-03)

• Specialized in constructing Secure Software Development Life Cycle (SSDLC) programs aligned to the OWASP SAMM framework
• Led security risk assessments and developed deliverables for technical and non-technical leadership
• Enhanced security monitoring capabilities via queries, correlation rules, dashboards, alerts, and reports

Cyber Associate, Proactive Advisory, Digital Forensics & Incident Response Teams at Aon Cyber Solutions (2017-08 – 2018-05)

• Executed an RFP to evaluate and select a data loss prevention solution for an educational institution's Data Governance Program
• Conducted forensic investigations across civil, criminal, and business cases, including data preservation, analysis, and reporting

Summer Cyber Associate, Stroz Friedberg Digital Forensics & Incident Response Team at Aon Cyber Solutions (2016-05 – 2016-08)

• Investigated digital forensics and incident response cases, preserving and analyzing data from desktop computers, laptops, servers, tablets, and mobile devices
• Forensically examined emerging technologies, including virtual home assistants and associated user privacy considerations, while building proficiency in industry-standard forensic tools and practices

Summer Associate, Enterprise Information Security and Privacy Team at Toyota USA (2015-05 – 2015-08)

• Designed and tracked phishing simulation campaigns to train 50+ Toyota team members on safe online practices and email security
• Facilitated implementation of automated vulnerability-scanning tools and integrated new SOPs to expedite technology incident resolution

BS in Business Administration (Minor: Applied Computer Security) – University of Southern California, Marshall School of Business (2013 – 2017)