Cyber Risk Consultant - Hybrid (Sydney/Perth)

Marsh; Sydney, Perth; Hybrid; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work environment

Professional development opportunities

Diversity and inclusion

Job summary

Marsh is seeking a Consultant to join the Cyber Risk Consulting team in Sydney or Perth. This hybrid role requires in-office work at least three days per week and focuses on improving cyber resilience through risk assessments, governance enhancements, and incident readiness.

You will translate technical cyber issues into clear business advice, work with senior consultants and stakeholders, and contribute to governance and resilience uplift roadmaps across multiple industries.

Qualifications

• 2–4 years of experience in cyber security, cyber risk, technology risk, or related consulting.
• Experience in risk assessments, security reviews, incident response planning, and/or cyber resilience work.
• Strong knowledge of governance, vulnerability management, IAM, cloud security and third-party risk frameworks.

Responsibilities

• Support delivery of cyber risk consulting engagements, including risk assessments and maturity reviews.
• Assess cyber security risks, gaps, and control effectiveness across people, process, technology and third parties.
• Prepare incident response plans, playbooks and board/executive workshop materials.
• Contribute to client advisory work on governance, policies, and resilience roadmaps.
• Review security controls against ISO 27001, NIST, CPS 234 and ASD Essential Eight.
• Support evaluation of security technologies and vendors to improve client posture.
• Help quantify cyber risk and communicate findings for investment decisions.
• Build relationships and contribute to proposals and thought leadership.

Skills

Cyber security

Communication skills

Analytical thinking

Stakeholder management

Job description

Marsh is seeking a Consultant to join the Cyber Risk Consulting team in Sydney or Perth. This hybrid role requires in-office work at least three days per week and focuses on improving cyber resilience through risk assessments, governance enhancements, and incident readiness.

You will translate technical cyber issues into clear business advice, work with senior consultants and stakeholders, and contribute to governance and resilience uplift roadmaps across multiple industries.