ERM Analyst Senior

CRIF S.p.A.; Bologna; On-site; EUR 32,000 - 40,000; Full time

Job summary

CRIF S.p.A. is seeking an Enterprise Risk Management Senior Analyst to support monitoring of the risk profile, KRIs, and risk reporting. You will work under guidance to collect and analyze risk data, maintain ERM tools and documentation, and monitor action plans.

The role requires about 2 years in ERM or related fields, a degree in engineering/economics/law, and good English. A professional, collaborative mindset and attention to detail are essential for success.

Qualifications

• Approximately 2 years of experience in Enterprise Risk Management or related fields.
• Knowledge of risk assessment concepts and risk management processes.
• Familiarity with COSO ERM, ISO 31000 or COBIT is advantageous.
• Knowledge of DORA and EU AI Act implications.
• Familiarity with ISO 45001 and ISO 9001 standards.

Responsibilities

• Support maintenance of ISO certifications, risk assessments and documentation.
• Assist risk assessment activities including KRIs collection and monitoring.
• Maintain Risk Register and governance tools ensuring up-to-date information.
• Track mitigation actions and report delays to senior team members.
• Prepare reports, dashboards and materials for management and committees.
• Support ERM methodologies, templates and guidance materials.
• Promote risk awareness across business functions.

Skills

ERM experience

Risk assessment

Data handling

English (written)

Governance knowledge

Education

Degree in engineering/economics/law

Job description

Enterprise Risk Management Senior Analyst

Role and purpose

Join the Enterprise Risk Management (ERM) team and support the monitoring of the company's risk profile, risk assessment activities, Key Risk Indicators (KRIs), risk reporting and the continuous improvement of the risk management framework.

Working under the guidance of senior team members to collect and analyze risk information, maintain ERM tools and documentation, and monitor risk treatment actions.

Key Responsibilities

• Support activities related to the maintenance of relevant ISO certifications, including risk assessments, monitoring activities and supporting documentation
• Support the execution of risk assessment activities including collection and monitoring of Key Risk Indicators (KRIs).
• Help maintain the Risk Register and other risk governance tools, ensuring information is complete, accurate and up to date.
• Track risk mitigation and treatment actions, follow up with action owners and highlight delays or issues to senior team members.
• Prepare periodic reports, dashboards and presentation materials for management and internal committees.
• Support the maintenance of ERM methodologies, procedures, templates and guidance materials.
• Promote collaboration and risk awareness across business functions.

Qualifications and Experience

• Approximately 2 years of experience in Enterprise Risk Management, ICT Risk, Internal Audit, consulting or a related area.
• Degree in engineering, economics, law or an equivalent field.
• Good knowledge of risk assessment concepts and risk management processes, gained through work experience, internships or relevant academic projects.
• Familiarity with governance, risk management or internal control frameworks, such as COSO ERM, ISO 31000 or COBIT, is an advantage.
• Knowledge of the Digital Operational Resilience Act (DORA) and the EU AI Act, including their implications for technology, operational resilience and AI-related risk management.
• Familiarity with ISO 45001 and ISO 9001 standards and their application to occupational health and safety and quality management systems.
• Confidence working with data, spreadsheets and structured documentation; experience with KRIs, risk metrics or dashboards is an advantage.
• Good written and spoken English.

Soft skills

• Analytical mindset and curiosity.
• Attention to detail and commitment to quality.
• Problem-solving attitude and willingness to learn.
• Clear and effective communication.
• Ability to organize work and manage priorities.
• Pragmatic and proactive approach.
• Collaborative mindset and ability to work cross-functionally.
• Openness to feedback and constructive challenge.

Pursuant to Regulation (EU) 2016/679("GDPR"), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link , in the "Terms of Use" section.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

Permanent contract

The Annual Salary for this position starts from 36.000 euro gross per year.

The level of classification will be determined during the selection process based on the candidate's profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate's profile against the role requirements.