ERM Advisor Level

CRIF; Emilia-Romagna; On-site; EUR 36,000 - 44,000; Full time

Job summary

CRIF is seeking an Enterprise Risk Management Advisor to support the Head of ERM in defining and evolving the ERM model across the company. You will work with Risk Owners and business functions to monitor risk, assess processes, define KRIs and produce governance reporting.

The role contributes to strengthening internal controls, aligning with COSO/ISO standards, and promoting a strong risk culture while delivering robust insights to management.

Qualifications

• 4-6 years of ERM, Internal Control or ICT risk experience.
• Degree in economics, finance, engineering, law, mathematics, statistics, computer science or related field.
• Knowledge of COSO ERM, ISO 31000, COBIT, ISACA guidance and regulatory frameworks.

Responsibilities

• Support the definition, implementation and continuous improvement of the ERM framework.
• Monitor risk profile, KRIs and risk reporting for management and governance bodies.
• Prepare periodic risk reports and documentation for committees and governance bodies.
• Promote a strong risk culture and cross-functional collaboration across business units.

Skills

Critical thinking

Analytical skills

Stakeholder management

Communication skills

Autonomy

Collaboration

Operational prioritization

Problem solving

Synthesis skills

Education

Degree in economics/finance/engineering/law/math/statistics/CS

Job description

Enterprise Risk Management Advisor Level

Support the Head of Enterprise Risk Management in defining, evolving and executing the Enterprise Risk Management (ERM) model, contributing to the monitoring of the company’s risk profile, risk assessment processes, the definition and monitoring of Key Risk Indicators (KRIs), risk reporting and the continuous strengthening of the risk management framework.

The role acts as a methodological point of reference for ERM processes, operating with a high degree of autonomy, working with Risk Owners and business functions in the assessment, monitoring and treatment of risks, while ensuring the quality, consistency and robustness of the enterprise-wide risk management system.

Key Responsibilities

• Support the definition, implementation and continuous improvement of the Enterprise Risk Management framework.
• Support the definition, monitoring and evolution of the Risk Appetite Framework (RAF), including the management of breaches and escalations.
• Plan, coordinate and perform risk assessment processes, ensuring the correct application of the relevant methodology.
• Facilitate the identification, analysis, assessment and monitoring of enterprise risks.
• Challenge the assessments carried out by Risk Owners and the business functions involved.
• Support the definition, evolution and monitoring of Key Risk Indicators (KRIs) and the related warning thresholds.
• Contribute to the management and maintenance of the Risk Register and other risk governance tools.
• Monitor the progress of risk mitigation and treatment actions, assessing their effectiveness and timely completion.
• Analyze trends, risk events, incidents, audit findings, regulatory requirements and emerging factors that may affect the company’s risk profile.
• Prepare periodic reports and documentation for management, committees and governance bodies.
• Contribute to the evolution of the methodologies, processes, templates and tools used by the ERM function.
• Support initiatives aimed at strengthening the internal control system and ensuring alignment with applicable legal and regulatory requirements.
• Promote a strong risk culture and effective collaboration across business functions.

Qualifications And Experience

• 4-6 years of experience in Enterprise Risk Management, Internal Control Systems, ICT Risk or equivalent functions.
• Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field.
• Strong knowledge of risk assessment methodologies and core risk management processes.
• Knowledge of key governance, risk management and internal control frameworks and standards, such as COSO ERM, ISO 31000, COBIT, ISACA guidance and applicable regulatory frameworks.
• Knowledge of relevant regulatory requirements affecting enterprise, ICT and operational risk management, including DORA and the EU AI Act.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Experience in defining, monitoring and analyzing Key Risk Indicators (KRIs) and risk metrics.
• Ability to prepare structured reports and presentations for management and governance bodies.
• Ability to analyze and interpret risk from an enterprise-wide perspective, including strategic, operational, financial, regulatory, technology, reputational and third-party risks.
• Ability to manage project activities and coordinate stakeholders across different business functions.
• Excellent written and spoken English.

Soft Skills

• Critical thinking and the ability to provide constructive challenges.
• Enterprise-wide perspective and systems thinking.
• Strong analytical and problem-solving skills.
• Effective stakeholder management.
• Operational autonomy and prioritization skills.
• Pragmatic, results-oriented approach.
• Collaborative mindset and ability to work cross-functionally.
• Excellent communication and synthesis skills.

Permanent contract

The Annual Salary for this position starts from 40.000 euro gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

Pursuant to Regulation (EU) 2016/679(“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.