Graduate / Consulting Analyst - Cyber Risk and Regulatory Compliance

About the role

Marsh's Risk Consulting team, part of its Risk business, is looking for a graduate or candidate with relevant experience to join its Cyber Risk and Regulatory Compliance team in Lisbon. The role is hybrid, with at least three days a week spent in the office. The team helps clients identify, assess and manage cyber and technology-related risks such as ransomware, data breaches, system outages and third-party risks.

Key responsibilities

• Support cyber risk assessments, control reviews, resilience analysis and business continuity studies across the digital lifecycle.
• Turn technical findings into clear, practical and cost-effective recommendations for clients.
• Conduct cybersecurity risk assessments and analyse vulnerabilities, threat vectors and their impact on business operations.
• Develop remediation strategies and risk mitigation recommendations, and prepare technical and executive-level reports.
• Develop incident response and recovery playbooks, and documented information security management frameworks.
• Develop third-party risk management systems and procedures, and support underwriting and pricing decisions.
• Run training and awareness sessions on cyber threats and risks.

Required profile

• Degree in Computer Science, Cybersecurity, Information Security or a similar field, or equivalent professional experience.
• Detail-oriented and organised, with strong analytical skills.
• Strong English (B2/C) verbal and written communication.
• Interest in consulting projects and serving clients in cybersecurity and regulatory compliance.
• Ability to influence stakeholders and explain complex cyber risks to non-technical audiences.

Required skills

• Strong knowledge of Microsoft Office, especially Excel.
• Nice to have: knowledge of NIST, ISO 27000 and CIS controls, and familiarity with DORA and NIS 2.
• Nice to have: proficiency with cybersecurity assessment tools, interest in Microsoft Power BI, and relevant certifications such as CISSP or CISM.

What we offer

• Professional development opportunities and supportive leadership.
• A diverse, inclusive culture with a range of career opportunities.
• Benefits and rewards designed to enhance well-being.