Enterprise Risk Management Advisor Level

Role and purpose

Support the Head of Enterprise Risk Management in defining, evolving and executing the Enterprise Risk Management (ERM) model, contributing to the monitoring of the company’s risk profile, risk assessment processes, the definition and monitoring of Key Risk Indicators (KRIs), risk reporting and the continuous strengthening of the risk management framework.

The role acts as a methodological point of reference for ERM processes, operating with a high degree of autonomy, working with Risk Owners and business functions in the assessment, monitoring and treatment of risks, while ensuring the quality, consistency and robustness of the enterprise-wide risk management system.

Key Responsibilities

Support the definition, implementation and continuous improvement of the Enterprise Risk Management framework. Support the definition, monitoring and evolution of the Risk Appetite Framework (RAF), including the management of breaches and escalations. Plan, coordinate and perform risk assessment processes, ensuring the correct application of the relevant methodology. Facilitate the identification, analysis, assessment and monitoring of enterprise risks. Challenge the assessments carried out by Risk Owners and the business functions involved. Support the definition, evolution and monitoring of Key Risk Indicators (KRIs) and the related warning thresholds. Contribute to the management and maintenance of the Risk Register and other risk governance tools. Monitor the progress of risk mitigation and treatment actions, assessing their effectiveness and timely completion. Analyze trends, risk events, incidents, audit findings,



regulatory requirements and emerging factors that may affect the company’s risk profile. Prepare periodic reports and documentation for management, committees and governance bodies. Contribute to the evolution of the methodologies, processes, templates and tools used by the ERM function. Support initiatives aimed at strengthening the internal control system and ensuring alignment with applicable legal and regulatory requirements. Promote a strong risk culture and effective collaboration across business functions.

Qualifications and Experience

4-6 years of experience in Enterprise Risk Management, Internal Control Systems, ICT Risk or equivalent functions. Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field. Strong knowledge of risk assessment methodologies and core risk management processes. Knowledge of key governance, risk management and internal control frameworks and standards, such as COSO ERM, ISO , COBIT, ISACA guidance and applicable regulatory frameworks. Knowledge of relevant regulatory requirements affecting enterprise, ICT and operational risk management, including DORA and the EU AI Act.



Familiarity with ISO and ISO 1 standards and their application to occupational health and safety and quality management systems. Experience in defining, monitoring and analyzing Key Risk Indicators (KRIs) and risk metrics. Ability to prepare structured reports and presentations for management and governance bodies. Ability to analyze and interpret risk from an enterprise-wide perspective, including strategic, operational, financial, regulatory, technology, reputational and third-party risks. Ability to manage project activities and coordinate stakeholders across different business functions. Excellent written and spoken English.

Soft Skills

Critical thinking and the ability to provide constructive challenges. Enterprise-wide perspective and systems thinking. Strong analytical and problem-solving skills. Effective stakeholder management. Operational autonomy and prioritization skills. Pragmatic, results-oriented approach. Collaborative mindset and ability to work cross-functionally. Excellent communication and synthesis skills.

Permanent contract

The Annual Salary for this position starts from . euro gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

We offer
a safe and inclusive environment where colleagues are encouraged to think outside the

📌 ERM Advisor Level (Bologna)
🏢 Crif
📍 Bologna