Job Title: Cyber Consultant
Base Location: Mumbai, India
Experience: 5+ years
Region Covered: India, Middle East and South East Asia
Job Purpose / Brief of Job Role
Serve as a technical expert supporting our underwriting teams and clients on risk assessment, incident response and other advisory services with the aim of enhancing the quality, resilience and scalability of our cyber business.
Key Responsibilities
- Conduct cyber risk assessments of individual commercial risks and translate technical findings into actionable underwriting recommendations.
- Identify, evaluate and benchmark the effectiveness of security controls against evolving threats, attack vectors and mitigation strategies.
- Continuously enhance our cyber risk assessment methodologies, frameworks and questionnaires.
- Provide analytical support on cyber coverage language and its alignment with current threat trends, loss scenarios and portfolio exposures.
- Deliver cyber security guidance, training and strategic advice to both internal stakeholders and external clients.
- Support incident response and claims teams with technical expertise, including incident analysis, post-incident reviews and the assessment of incident response service providers.
- Represent Munich Re at industry events and conferences; conduct trend scouting and publish topic papers on emerging threats and technologies.
Education, Experience and Personal Attributes
- Degree in IT Security, Computer Science, Electrical Engineering or a related technical field, or equivalent relevant professional experience, complemented by relevant certifications (e.g. CISSP, ISO 27001 Lead Auditor).
- At least five years of experience in security consulting, cyber risk management, cyber insurance or cyber incident response.
- Sound knowledge of major cyber risk frameworks (e.g. NIST CSF, MITRE ATT&CK, ISO 27001) and of cyber and data protection regulation across India, the Middle East and Southeast Asia (e.g. CERT-In Directions, DPDP Act, IRDAI Cyber Security Guidelines, NCA ECC, SAMA CSF, MAS TRM).
- Ability to contextualise cyber threats by region and industry, factoring in geopolitical risk, regional regulation and local IT maturity.
- Ability to translate threat intelligence into insurance-relevant impact scenarios (e.g. ransomware affecting supply chains, cloud provider outages, mass exploitation events) to support underwriting and portfolio steering.
- Self-directed and proactive, with a strong sense of ownership.
- Strong team player who can explain complex technical topics clearly to non-technical audiences.
- Excellent spoken and written business English; additional language skills such as Arabic, Bahasa or Thai would be beneficial.
We see DEI as a business imperative, helping us to attract, grow and inspire a diverse, inclusive, and equitable workforce that better enable us to serve our customers, investors, and communities. Globally, we strive to build balanced teams across all aspects of difference. If you are interested in the role and believe you could contribute, we encourage you to apply even if your experience doesn't perfectly match every qualification.