Graduate / Consulting Analyst - Cyber Risk and Regulatory Compliance

Marsh Agency; Lisboa; Híbrido; EUR 32.000 - 52.000; Jornada completa

Descripción de la vacante

Marsh in Lisbon is seeking a Consulting Analyst to join our Risk Consulting team. This hybrid role requires in-office presence at least three days per week.

You will support cyber risk assessments, control reviews, resilience analyses, and business continuity studies across the digital lifecycle, translating findings into practical recommendations for clients. We welcome graduates and those with relevant experience, offering exposure to major enterprise clients and opportunities to grow within a

Formación

• Degree in Computer Science, Cybersecurity, or similar field.
• Detail-oriented and organized with strong analytical skills.
• Fluent written and spoken English (B2/C level).
• Strong Excel and MS Office knowledge.
• Interest in consulting projects for cybersecurity and regulatory compliance.
• Team player able to influence stakeholders.
• Able to explain cyber risks to non-technical audiences.

Responsabilidades

• Conduct comprehensive cybersecurity risk assessments for enterprise clients.
• Analyze vulnerabilities, threat vectors, and potential impacts.
• Develop remediation strategies and risk mitigation recommendations.
• Prepare detailed reports on cyber risk findings for different audiences.
• Develop incident response playbooks and recovery strategies.
• Create information security management frameworks for clients.
• Support third-party risk management systems and procedures.
• Collaborate with clients to understand their risk appetite.
• Assist underwriting and pricing with cyber risk insights.
• Deliver training to raise awareness of cyber threats.

Conocimientos

Strong verbal and written English

Detail oriented

Analytical capabilities

Team player

Emotional intelligence

Educación

Degree in Computer Science, Cybersecurity, Information Security

Herramientas

Excel

Descripción del empleo

We are seeking a talented individual to join our Risk Consulting team, part of our Risk business at Marsh. This role will be based in Lisbon. This is a hybrid role that has a requirement of working at least three days a week in the office.

Marsh’s Cyber Risk and Regulatory Compliance team helps clients identify, assess and manage cyber and technology-related risks that can disrupt business operations, including ransomware, data breaches, system outages, third-party risks and other emerging threats.

As a Consulting Analyst, you will support cyber risk assessments, control reviews, resilience analysis and business continuity studies across the digital lifecycle, from strategy and design through implementation, operations, incident response and recovery. You will work with experienced colleagues to turn technical findings into clear, practical and cost-effective recommendations that help clients achieve their business objectives.

We welcome applications from both recent graduates and candidates with relevant work experience.

We Will Count On You To

• Conduct comprehensive cybersecurity risk assessments for enterprise clients;
• Analyze vulnerabilities, threat vectors, and potential impact on business operations;
• Develop actionable remediation strategies and risk mitigation recommendations;
• Stay current with emerging cyber threats, attack methodologies, and regulatory requirements;
• Prepare detailed technical and executive-level reports on cyber risk findings;
• Elaborate cyber incident response and recover playbooks and strategies;
• Develop documented frameworks for information security management at our clients;
• Develop third-party risk management systems and procedures;
• Collaborate with clients to understand their business environment and risk appetite;
• Support underwriting and pricing decisions with expert cyber risk insights;
• Develop training and culture sessions to improve awareness regarding cyber threats, vulnerabilities and risks at our clients.

What You Need To Have

• Degree in Computer Science, Cybersecurity, Information Security, or similar field (or equivalent professional experience);
• Detail-oriented and organized profile with excellent analytical capabilities;
• Strong verbal and written communication skills in English (B2/C level);
• Strong knowledge of Microsoft Office tools, especially Excel.
• Interest in consulting projects and providing services to clients in cybersecurity and regulatory compliance;
• Strong team player with ability to influence and guide stakeholders;
• Emotional intelligence and ability to communicate complex cyber risks to non-technical audiences.

What makes you stand out?

• Knowledge of cyber threats, vulnerabilities, and security frameworks (NIST, ISO 27000 package, CIS Controls);
• Proficiency with cybersecurity assessment tools and frameworks;
• Interest about regulatory compliance (DORA, NIS 2);
• Comfortable conducting business conversations also in Spanish;
• Curious and interested about Microsoft Power BI;
• Relevant certifications such as CISS or CISM.

Why Join Our Team

• We help you be your best through professional development opportunities, interesting work and supportive leaders;
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities;
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to providing an inclusive work environment. We aim to attract and retain the best, most qualified people and value colleagues of all backgrounds, without regard to age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.