Graduate/Junior Consulting Analyst – Cyber Risk

About the role

Join Marsh’s Cyber Risk and Regulatory Compliance team as a Graduate/Junior Consulting Analyst. Based in Lisbon or Porto, you will work in a hybrid model, supporting clients in identifying and managing cyber‑related risks across the digital lifecycle.

Key responsibilities

• Conduct comprehensive cybersecurity risk assessments for enterprise clients.
• Analyze vulnerabilities, threat vectors, and potential business impact.
• Develop actionable remediation strategies and risk‑mitigation recommendations.
• Prepare detailed technical and executive‑level reports on findings.
• Create incident‑response and recovery playbooks.
• Support the design of information‑security management frameworks.
• Assist in third‑party risk management procedures.
• Collaborate with clients to align risk solutions with their business appetite.
• Provide cyber‑risk insights for underwriting and pricing decisions.
• Deliver training sessions to raise cyber‑awareness.

Required profile

• Degree in Computer Science, Cybersecurity, Information Security or a related field, or equivalent experience.
• Detail‑oriented with strong analytical capabilities.
• Excellent verbal and written English communication (B2/C level).
• Team player with the ability to influence stakeholders.
• Emotional intelligence to convey complex risks to non‑technical audiences.

Required skills

• Microsoft Excel
• Microsoft Power BI
• Knowledge of security frameworks: NIST, ISO 27000 series, CIS Controls
• Familiarity with regulatory standards: DORA, NIS 2
• Experience with cybersecurity assessment tools and frameworks
• Relevant certifications (e.g., CISS, CISM) are a plus