Enterprise Risk Management Senior Analyst

CRIF; Bologna; On-site; EUR 32,000 - 40,000; Full time

Job summary

CRIF is seeking to strengthen its Enterprise Risk Management capabilities in Bologna. The role supports monitoring the risk profile, KRIs and the risk management framework, under guidance from senior colleagues.

You will collect and analyze risk data, maintain ERM tools, and report on risk treatment actions to senior management. A ~2-year background in risk domains, English proficiency, and familiarity with ERM standards are expected.

Qualifications

• Approximately 2 years of experience in Enterprise Risk Management or related area.
• Degree in engineering, economics, or law.
• Knowledge of risk assessment concepts and processes.
• Familiarity with COSO ERM, ISO 31000 or COBIT is an advantage.
• Knowledge of DORA and EU AI Act implications.
• Familiarity with ISO 45001 and ISO 9001 standards.
• Comfort with data, spreadsheets and documentation; KRIs or dashboards is an advantage.
• Good written and spoken English.

Responsibilities

• Maintain ERM tools and documentation and monitor KRIs and risk treatment actions.
• Support ISO certification activities and risk assessments.
• Maintain Risk Register and governance tools ensuring accuracy.
• Prepare periodic risk reports, dashboards and management materials.
• Promote collaboration and risk awareness across functions.
• Monitor progress of risk actions and escalate delays.

Skills

ERM knowledge

Data analysis

Stakeholder communication

English proficiency

Education

Degree in engineering, economics or law

Tools

Excel

Risk dashboards

Job description

Role and purpose

Join the Enterprise Risk Management (ERM) team and support the monitoring of the company’s risk profile, risk assessment activities, Key Risk Indicators (KRIs), risk reporting and the continuous improvement of the risk management framework.

Working under the guidance of senior team members to collect and analyze risk information, maintain ERM tools and documentation, and monitor risk treatment actions.

Key Responsibilities

• Support activities related to the maintenance of relevant ISO certifications, including risk assessments, monitoring activities and supporting documentation
• Support the execution of risk assessment activities including collection and monitoring of Key Risk Indicators (KRIs).
• Help maintain the Risk Register and other risk governance tools, ensuring information is complete, accurate and up to date.
• Track risk mitigation and treatment actions, follow up with action owners and highlight delays or issues to senior team members.
• Prepare periodic reports, dashboards and presentation materials for management and internal committees.
• Support the maintenance of ERM methodologies, procedures, templates and guidance materials.
• Promote collaboration and risk awareness across business functions.

Qualifications and Experience

• Approximately 2 years of experience in Enterprise Risk Management, ICT Risk, Internal Audit, consulting or a related area.
• Degree in engineering, economics, law or an equivalent field.
• Good knowledge of risk assessment concepts and risk management processes, gained through work experience, internships or relevant academic projects.
• Familiarity with governance, risk management or internal control frameworks, such as COSO ERM, ISO 31000 or COBIT, is an advantage.
• Knowledge of the Digital Operational Resilience Act (DORA) and the EU AI Act, including their implications for technology, operational resilience and AI-related risk management.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Confidence working with data, spreadsheets and structured documentation; experience with KRIs, risk metrics or dashboards is an advantage.
• Good written and spoken English.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

type of contract: permanent

The Annual Salary for this position starts from €36.000 gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements

Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.