ERM Advisor Level

CRIF S.p.A.; Emilia-Romagna; Hybrid; EUR 36,000 - 44,000; Full time

Benefits offered by this job

Diversity & inclusion

Professional development opportunities

Job summary

CRIF S.p.A. in Bologna, Italy, is seeking an Enterprise Risk Management Advisor Level to support the Head of ERM in shaping, deploying and monitoring the ERM model across the firm.

The role acts as a methodological reference, autonomously working with Risk Owners and business functions to assess, monitor and treat risks while ensuring the quality of the enterprise-wide risk management framework. Key responsibilities include developing and improving the ERM framework, RAF monitoring, KRIs, risk

Qualifications

• 4-6 years of ERM, internal control or equivalent experience.
• Degree in economics, finance, engineering, law, math, statistics or CS.
• Knowledge of COSO ERM, ISO 31000, COBIT and ISACA guidance.
• Regulatory knowledge for enterprise/ICT risk management, incl. DORA and EU AI Act.
• ISO 45001 and ISO 9001 familiarity and application.
• Excellent written and spoken English.

Responsibilities

• Define, implement and improve the ERM framework.
• Monitor RAF, manage breaches and escalations.
• Coordinate risk assessments with methodology.
• Identify, analyze and monitor enterprise risks.
• Challenge assessments by Risk Owners and functions.
• Define and monitor KRIs and warning thresholds.
• Maintain Risk Register and governance tools.
• Track mitigation progress and effectiveness.
• Analyze trends, incidents, audits and regulatory factors.
• Prepare periodic reports for management and governance bodies.
• Contribute to methodologies, templates and tools used by ERM.
• Support internal control strengthening and regulatory alignment.
• Promote strong risk culture across functions.

Skills

ERM framework

Risk assessment

KRIs

RAF

Regulatory knowledge

English fluency

Stakeholder coordination

Education

Economics/Finance/Engineering or related

Job description

Select how often (in days) to receive an alert:

Location:

Bologna, IT

Enterprise Risk Management Advisor Level

Role and purpose

Support the Head of Enterprise Risk Management in defining, evolving and executing the Enterprise Risk Management (ERM) model, contributing to the monitoring of the company’s risk profile, risk assessment processes, the definition and monitoring of Key Risk Indicators (KRIs), risk reporting and the continuous strengthening of the risk management framework.

The role acts as a methodological point of reference for ERM processes, operating with a high degree of autonomy, working with Risk Owners and business functions in the assessment, monitoring and treatment of risks, while ensuring the quality, consistency and robustness of the enterprise-wide risk management system.

Key Responsibilities

• Support the definition, implementation and continuous improvement of the Enterprise Risk Management framework.
• Support the definition, monitoring and evolution of the Risk Appetite Framework (RAF), including the management of breaches and escalations.
• Plan, coordinate and perform risk assessment processes, ensuring the correct application of the relevant methodology.
• Facilitate the identification, analysis, assessment and monitoring of enterprise risks.
• Challenge the assessments carried out by Risk Owners and the business functions involved.
• Support the definition, evolution and monitoring of Key Risk Indicators (KRIs) and the related warning thresholds.
• Contribute to the management and maintenance of the Risk Register and other risk governance tools.
• Monitor the progress of risk mitigation and treatment actions, assessing their effectiveness and timely completion.
• Analyze trends, risk events, incidents, audit findings, regulatory requirements and emerging factors that may affect the company’s risk profile.
• Prepare periodic reports and documentation for management, committees and governance bodies.
• Contribute to the evolution of the methodologies, processes, templates and tools used by the ERM function.
• Support initiatives aimed at strengthening the internal control system and ensuring alignment with applicable legal and regulatory requirements.
• Promote a strong risk culture and effective collaboration across business functions.

Qualifications and Experience

• 4-6 years of experience in Enterprise Risk Management, Internal Control Systems, ICT Risk or equivalent functions.
• Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field.
• Strong knowledge of risk assessment methodologies and core risk management processes.
• Knowledge of key governance, risk management and internal control frameworks and standards, such as COSO ERM, ISO 31000, COBIT, ISACA guidance and applicable regulatory frameworks.
• Knowledge of relevant regulatory requirements affecting enterprise, ICT and operational risk management, including DORA and the EU AI Act.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Experience in defining, monitoring and analyzing Key Risk Indicators (KRIs) and risk metrics.
• Ability to prepare structured reports and presentations for management and governance bodies.
• Ability to analyze and interpret risk from an enterprise-wide perspective, including strategic, operational, financial, regulatory, technology, reputational and third-party risks.
• Ability to manage project activities and coordinate stakeholders across different business functions.
• Excellent written and spoken English.

Soft Skills

• Critical thinking and the ability to provide constructive challenges.
• Enterprise-wide perspective and systems thinking.
• Strong analytical and problem-solving skills.
• Operational autonomy and prioritization skills.
• Pragmatic, results-oriented approach.
• Collaborative mindset and ability to work cross-functionally.
• Excellent communication and synthesis skills.

Permanent contract

The Annual Salary for this position starts from 40.000 eurogross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link , in the “Terms of Use” section.