Graduate/Junior Consulting Analyst – Cyber Risk

About the role

Join Marsh’s Cyber Risk and Regulatory Compliance team as a Graduate/Junior Consulting Analyst. Based in Lisbon or Porto, you will work in a hybrid model, spending at least three days per week in the office while supporting clients across the digital lifecycle.

Key responsibilities

• Conduct comprehensive cybersecurity risk assessments for enterprise clients.
• Analyze vulnerabilities, threat vectors, and potential business impact.
• Develop remediation strategies, risk‑mitigation recommendations, and incident‑response playbooks.
• Prepare technical and executive‑level reports on findings.
• Assist in building third‑party risk management procedures and information security frameworks.
• Support underwriting and pricing decisions with cyber risk insights.
• Deliver training sessions to raise cyber‑risk awareness.

Required profile

• Degree in Computer Science, Cybersecurity, Information Security or related field, or equivalent experience.
• Detail‑oriented with strong analytical abilities.
• Excellent written and verbal communication in English (B2/C level).
• Team player with the ability to influence stakeholders.

Required skills

• Microsoft Excel
• Microsoft Power BI (interest)
• Knowledge of NIST, ISO 27000 series and CIS Controls frameworks
• Familiarity with cybersecurity assessment tools and methodologies

What we offer

• Opportunity to work with experienced consultants on real‑world cyber risk projects.
• Hybrid work arrangement with a collaborative office environment.
• Professional development and mentorship for recent graduates.