(Junior) Consultant – Cyber Risk & Operational Resilience

(100%) About the role

As a Consultant in the Cyber Risk & Operational Resilience team at Forvis Mazars, you will support organizations in managing cyber risks, operational resilience and regulatory requirements in an increasingly digital and regulated environment. You will work on a variety of consulting and assessment engagements across industries and support our clients in building and enhancing cyber governance and regulatory compliance frameworks. As a Consultant, you will primarily contribute to project work by performing analyses, preparing deliverables and supporting workshops and client engagements. Your work will focus on Cyber Risk, Operational Resilience and Data Protection / Privacy, while topics related to AI Governance may occasionally be part of your engagements.

Your responsibilities

• Contribute to Cyber Risk and Operational Resilience projects across industries, e.g. Cyber Maturity Assessments, Data Privacy & Protection projects, Regulatory Gap Assessments or Business Continuity Management (BCM) exercises
• Support the development and enhancement of cyber governance structures and security frameworks such as ISO 27001, NIST CSF, CIS Controls, etc.
• Analyze regulatory requirements such as DORA, NIS2, GDPR, FINMA regulations and related standards, and prepare reports, presentations and project documentation
• Support workshops and client meetings
• Conduct research on current cyber risk, resilience and regulatory topics
• Contribute to the development of services and methodologies
• Participate in events and professional forums in the areas of cyber risk, resilience and AI governance
• Project-based travel to client sites

Your profile

• University degree in a relevant field, e.g.

  • Information Systems / Business Informatics
  • Computer Science / Cyber Security
  • Business / Risk Management
  • Law with a focus on data protection / privacy or technology
• Experience in a consulting environment is an advantage
• Experience in risk, compliance or audit-related roles is a plus
• Interest in regulatory topics such as DORA, NIS2, GDPR, FINMA requirements etc.
• Familiarity with frameworks such as ISO 27001, NIST, CIS Controls or COBIT
• Strong analytical and structured working style
• Very good MS365 skills, particularly PowerPoint and Excel
• Understanding of cyber security and IT risk concepts
• Certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor or CIPP/E are a plus
• Very good German or French and fluent English skills

Why Forvis Mazars

• Work on international cyber risk and resilience projects
• Join a growing Cyber & Technology Risk team
• Collaborate with cyber, risk, compliance and technology experts
• Gain exposure to cross-industry clients and regulatory environments
• Opportunity to shape new services and methodologies
• Modern office in Zurich and flexible working models
• Hybrid working environment
• Support for professional certifications and continuous development aligned with your career path

At Forvis Mazars inclusion and diversity are central to our values. We recognise that being an inclusive and diverse organisation makes us stronger as a business.

We seek to attract and recruit people who reflect the diverse nature of our clients and communities, regardless of ethnicity, nationality, disability, faith or belief, social background, age, sexual orientation and gender identity. Forvis Mazars selects candidates based on skills, knowledge, qualifications and experience.

We would not consider sent profiles by recruitment agencies.