Enterprise Risk Management Senior Analyst

CRIF; Emilia-Romagna; Sur place; EUR 32 000 - 40 000; Plein temps

Résumé du poste

CRIF invites applications for an Enterprise Risk Management Senior Analyst in Italy. The role focuses on supporting the monitoring of the company’s risk profile, risk assessment activities, KRIs, risk reporting and the ongoing improvement of the risk management framework.

You will work under guidance to collect and analyze risk information, maintain ERM tools and documentation, and monitor risk treatment actions, while contributing to cross-functional risk awareness and governance across the

Qualifications

• Approximately 2 years of experience in Enterprise Risk Management, ICT Risk, Internal Audit, consulting or related area.
• Good knowledge of risk assessment concepts and risk management processes.
• Familiarity with governance, risk management or internal control frameworks (COSO ERM, ISO 31000, COBIT) is an advantage.
• Knowledge of DORA and EU AI Act implications for technology risk management.
• Familiarity with ISO 45001 and ISO 9001 standards.
• Confidence with data, spreadsheets and structured documentation; KRIs/risk metrics or dashboards are an advantage.
• Good written and spoken English.

Responsabilités

• Support maintenance of ISO certifications, including risk assessments and monitoring.
• Assist risk assessment activities and tracking of KRIs.
• Maintain the Risk Register and governance tools, ensuring accuracy and completeness.
• Track risk mitigation actions and follow up with owners.
• Prepare periodic reports, dashboards and management materials.
• Support ERM methodologies, templates, and guidance materials.
• Promote collaboration and risk awareness across functions.

Connaissances

Risk management concepts

Data handling

English proficiency

Formation

Degree in engineering, economics, law or equivalent

Description du poste

Enterprise Risk Management Senior Analyst

Role and purpose

Join the Enterprise Risk Management (ERM) team and support the monitoring of the company’s risk profile, risk assessment activities, Key Risk Indicators (KRIs), risk reporting and the continuous improvement of the risk management framework.

Working under the guidance of senior team members to collect and analyze risk information, maintain ERM tools and documentation, and monitor risk treatment actions.

Key Responsibilities

• Support activities related to the maintenance of relevant ISO certifications, including risk assessments, monitoring activities and supporting documentation
• Support the execution of risk assessment activities including collection and monitoring of Key Risk Indicators (KRIs).
• Help maintain the Risk Register and other risk governance tools, ensuring information is complete, accurate and up to date.
• Track risk mitigation and treatment actions, follow up with action owners and highlight delays or issues to senior team members.
• Prepare periodic reports, dashboards and presentation materials for management and internal committees.
• Support the maintenance of ERM methodologies, procedures, templates and guidance materials.
• Promote collaboration and risk awareness across business functions.

Qualifications and Experience

• Approximately 2 years of experience in Enterprise Risk Management, ICT Risk, Internal Audit, consulting or a related area.
• Degree in engineering, economics, law or an equivalent field.
• Good knowledge of risk assessment concepts and risk management processes, gained through work experience, internships or relevant academic projects.
• Familiarity with governance, risk management or internal control frameworks, such as COSO ERM, ISO 31000 or COBIT, is an advantage.
• Knowledge of the Digital Operational Resilience Act (DORA) and the EU AI Act, including their implications for technology, operational resilience and AI-related risk management.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Confidence working with data, spreadsheets and structured documentation; experience with KRIs, risk metrics or dashboards is an advantage.
• Good written and spoken English.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

type of contract: permanent

The Annual Salary for this position starts from €36.000 gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements

Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.