We are seeking a highly motivated and commercially driven Cyber Risk Consultant to join our underwriting team, and help shape the future of cyber insurance in our markets and further reinforce Munich Re’s position as a trusted, forward-thinking for our client.
This role requires a unique blend of technical cyber security expertise, underwriting knowledge (preferred), and business development capability.
As a Cyber Consultant, you will serve as a technical expert supporting our underwriting teams, clients, and the broader cyber re-insurance strategy. Your responsibilities will span risk assessment, methodology development, incident response, advisory services, and underwriting - all with the aim of enhancing the quality, resilience, and scalability of our cyber underwriting approach.
Our Cyber team is a leading provider of cyber re-insurance solutions and oversees markets across Australia, New Zealand, Greater China and Africa. We develop and drive cyber reinsurance solutions across commercial and personal lines, covering both portfolio-based and single-risk business, while contributing to Munich Re’s global cyber ambitions.
Based in Sydney, you will collaborate closely with underwriters across multiple locations, markets and our very own internal global cyber expert community. You will contribute to the strategic growth of our cyber re-insurance portfolio and strengthen our market position.
Your Role
Technical Underwriting & Cyber Risk Assessment
- Assess cyber risks associated with insureds, cedants, and portfolios across multiple industry sectors, through the evaluation of cyber security controls, governance frameworks, and risk management practices.
- Conduct technical reviews of cyber questionnaires, security assessments, third-party reports, and client cyber maturity against recognised frameworks and regulatory requirements (e.g., NIST CSF, MITRE ATT&CK, ISO 27001, GDPR, DORA, APRA CPS 234).
- Provide technical underwriting recommendations to support risk selection, pricing decisions, portfolio management, and the evaluation of emerging cyber exposures, including underwriting responsibility for single risk business.
- Support the development and enhancement of cyber insurance and reinsurance solutions, including wording reviews and underwriting methodologies.
- Partner with underwriters, clients, brokers, and business partners to discuss cyber risk exposures, incident response capabilities, security controls, and risk improvement opportunities.
- Monitor cyber threat trends, ransomware developments, regulatory changes, and emerging technologies to strengthen underwriting capabilities and market insights.
- Deliver cyber risk awareness sessions, workshops, and advisory services to support clients, brokers, and internal stakeholders.
Business Development & Market Growth
- Support the execution of the company’s cyber growth strategy across Australasia, Africa, and Greater China.
- Build and maintain relationships with brokers, cedants, insurers, clients, and strategic partners while supporting marketing activities, industry events, and business development initiatives.
- Identify new business opportunities, emerging market segments, and industry trends to support portfolio growth and market expansion.
- Translate complex cyber security concepts into practical business insights and value propositions for clients and distribution partners.
- Collaborate with underwriting, actuarial, claims, and risk engineering teams to develop client-focused solutions, thought leadership, training materials, and market insights.
Your Profile
- Degree in Information Security, Computer Science, Engineering, or a related technical discipline, supported by relevant industry certifications (e.g., CISSP, CISM, CISA, GIAC, CCSP, CCSK, ISO 27001 Lead Auditor/Implementer).
- Minimum 5 years of experience in cyber security, cyber risk consulting, cyber underwriting, information security, cyber resilience, or related cyber risk management disciplines; insurance or reinsurance experience is advantageous.
- Strong knowledge of cyber security frameworks, information security governance, cyber resilience, incident response, third-party risk assessment, and relevant regulatory requirements.
- Experience engaging senior stakeholders and delivering technical and commercial recommendations to clients, partners, and executives.
- Demonstrated business development, relationship management, or client engagement experience, with the ability to identify growth opportunities and develop trusted partnerships.
- Strong analytical, problem-solving, communication, collaboration, and stakeholder management skills, with the ability to work effectively both independently and within international virtual teams.
- Proactive learner with adaptability to emerging technologies, evolving cyber threats, and innovation initiatives.
- Business-level proficiency in spoken and written English and Mandarin.
We see DEI as a business imperative, helping us to attract, grow and inspire a diverse, inclusive, and equitable workforce that better enable us to serve our customers, investors, and communities. Globally, we strive to build balanced teams across all aspects of difference. If you are interested in the role and believe you could contribute, we encourage you to apply even if your experience doesn't perfectly match every qualification.