ERM Advisor Level

CRIF S.p.A.; Bologna; On-site; EUR 36,000 - 44,000; Full time

Job summary

CRIF S.p.A. is seeking an Enterprise Risk Management Advisor Level to support the Head of ERM in defining and evolving the ERM model.

The role involves risk assessment, monitoring of KRIs, risk reporting, and strengthening of the risk management framework across the enterprise. You will work with Risk Owners and business functions to ensure quality, consistency and robustness of the ERM system, promoting a strong risk culture and cross-functional collaboration.

Qualifications

• 4-6 years of experience in Enterprise Risk Management, Internal Control or related fields.
• Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field.
• Strong knowledge of risk assessment methodologies and core risk management processes.
• Familiarity with COSO ERM, ISO 31000, COBIT and ISACA guidance.
• Knowledge of regulatory frameworks such as DORA and EU AI Act.
• Familiarity with ISO 45001 and ISO 9001 standards.
• Experience in defining, monitoring and analyzing KRIs and risk metrics.
• Ability to prepare structured reports for management and governance bodies.
• Excellent written and spoken English.

Responsibilities

• Support the definition and continuous improvement of the Enterprise Risk Management framework.
• Monitor the Risk Appetite Framework and manage breaches/escalations.
• Plan, coordinate and perform risk assessment processes.
• Identify, analyse and monitor enterprise risks across functions.
• Challenge risk assessments conducted by Risk Owners and business teams.
• Develop and monitor KRIs and warning thresholds.
• Maintain the Risk Register and other risk governance tools.
• Track progress of risk mitigations and assess effectiveness.
• Analyse trends, incidents and regulatory factors affecting risk profile.
• Prepare periodic management and governance reports.

Skills

Critical thinking

Enterprise-wide perspective

Analytical skills

Problem solving

Stakeholder management

Autonomy

Prioritization

Cross-functional collaboration

Communication skills

Synthesis skills

English proficiency

Education

Relevant degree in economics/finance/engineering/law/math/statistics/computer science

Job description

Enterprise Risk Management Advisor Level

Role and purpose Support the Head of Enterprise Risk Management in defining, evolving and executing the Enterprise Risk Management (ERM) model, contributing to the monitoring of the company’s risk profile, risk assessment processes, the definition and monitoring of Key Risk Indicators (KRIs), risk reporting and the continuous strengthening of the risk management framework.

The role acts as a methodological point of reference for ERM processes, operating with a high degree of autonomy, working with Risk Owners and business functions in the assessment, monitoring and treatment of risks, while ensuring the quality, consistency and robustness of the enterprise-wide risk management system.

Key Responsibilities

• Support the definition, implementation and continuous improvement of the Enterprise Risk Management framework.
• Support the definition, monitoring and evolution of the Risk Appetite Framework (RAF), including the management of breaches and escalations.
• Plan, coordinate and perform risk assessment processes, ensuring the correct application of the relevant methodology.
• Facilitate the identification, analysis, assessment and monitoring of enterprise risks.
• Challenge the assessments carried out by Risk Owners and the business functions involved.
• Support the definition, evolution and monitoring of Key Risk Indicators (KRIs) and the related warning thresholds.
• Contribute to the management and maintenance of the Risk Register and other risk governance tools.
• Monitor the progress of risk mitigation and treatment actions, assessing their effectiveness and timely completion.
• Analyze trends, risk events, incidents, audit findings, regulatory requirements and emerging factors that may affect the company’s risk profile.
• Prepare periodic reports and documentation for management, committees and governance bodies.
• Contribute to the evolution of the methodologies, processes, templates and tools used by the ERM function.
• Support initiatives aimed at strengthening the internal control system and ensuring alignment with applicable legal and regulatory requirements.
• Promote a strong risk culture and effective collaboration across business functions.

Qualifications and Experience

• 4-6 years of experience in Enterprise Risk Management, Internal Control Systems, ICT Risk or equivalent functions.
• Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field.
• Strong knowledge of risk assessment methodologies and core risk management processes.
• Knowledge of key governance, risk management and internal control frameworks and standards, such as COSO ERM, ISO 31000, COBIT, ISACA guidance and applicable regulatory frameworks.
• Knowledge of relevant regulatory requirements affecting enterprise, ICT and operational risk management, including DORA and the EU AI Act.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Experience in defining, monitoring and analyzing Key Risk Indicators (KRIs) and risk metrics.
• Ability to prepare structured reports and presentations for management and governance bodies.
• Ability to analyze and interpret risk from an enterprise-wide perspective, including strategic, operational, financial, regulatory, technology, reputational and third-party risks.
• Ability to manage project activities and coordinate stakeholders across different business functions.
• Excellent written and spoken English.

Soft Skills

• Critical thinking and the ability to provide constructive challenges.
• Enterprise-wide perspective and systems thinking.
• Strong analytical and problem-solving skills.
• Effective stakeholder management.
• Operational autonomy and prioritization skills.
• Pragmatic, results-oriented approach.
• Collaborative mindset and ability to work cross-functionally.
• Excellent communication and synthesis skills.

Permanent contract

The Annual Salary for this position starts from 40.000 euro gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

Pursuant to Regulation (EU) 2016/679(“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link , in the “Terms of Use” section.

— Published by CRIF S.p.A..