Overview

In this role you contribute to monitoring the company’s risk profile and supporting the ERM framework. You will collect and analyse risk information, maintain ERM tools, and track risk treatment actions under guidance from senior team members. You’ll work to sustain ISO certifications, prepare reports for management, and promote risk awareness across functions. This is a hands-on, cross-functional role with a clear impact on risk governance and resilience.

Retribuzione / Benefits

- Permanent contract
- Salary starting from 36.000 euro gross per year
- Inclusive and safe work environment
- Commitment to equal opportunities

Responsabilità

- Support maintenance of ISO certifications, including risk assessments and monitoring activities
- Execute risk assessment activities and monitor Key Risk Indicators (KRIs)
- Maintain the Risk Register and governance tools ensuring accuracy and completeness
- Track mitigation actions, follow up with owners and report delays to senior team
- Prepare periodic reports, dashboards and materials for management and committees
- Support ERM methodologies, procedures, templates and guidance materials




- Promote collaboration and risk awareness across business functions

Requisiti fondamentali

- Approximately 2 years of experience in ERM, ICT Risk, Internal Audit, consulting, or related area
- Degree in engineering, economics, law or equivalent field
- Knowledge of risk assessment concepts and risk management processes
- Familiarity with governance, risk management or internal control frameworks (COSO ERM, ISO 31000 or COBIT) is an advantage
- Knowledge of DORA and EU AI Act, including implications for technology and risk management
- Familiarity with ISO 45001 and ISO 9001 and their application to OHS and quality management systems
- Confidence working with data, spreadsheets and structured documentation; experience with KRIs or dashboards is an advantage
- Good written and spoken English

- Analytical mindset and curiosity
- Attention to detail and commitment to quality
- Problem-solving attitude and willingness to learn
- Familiarity with KRIs, risk metrics and dashboards
- Risk assessment concepts and methodologies
- Governance and risk management frameworks (COSO ERM, ISO 31000, COBIT)

📌 ERM Analyst Senior (Bologna)
🏢 Crif
📍 Bologna