Overview
In this role you help shape and execute the enterprise risk management model, supporting risk monitoring, RAF governance, and KRIs. You will work with risk owners and functions to ensure a robust, compliant risk framework and reporting. You'll analyze trends and events to inform management and governance bodies, strengthening internal control and risk culture. This position offers autonomy, cross-functional collaboration, and a meaningful impact on the company's risk posture.
Responsabilità
Support the definition and continuous improvement of the ERM framework
Guide the RAF definition, monitoring and breach management
Plan and run risk assessments using appropriate methodologies
Facilitate enterprise risk identification, analysis, and monitoring
Challenge assessments by Risk Owners and business functions
Develop and monitor Key Risk Indicators and warning thresholds
Maintain Risk Register and governance tools
Track risk mitigation progress and effectiveness
Analyze risk drivers from various domains (operational, regulatory, strategic)
Prepare reports for management and governance bodies
Contribute to evolving methodologies, templates and tools used by ERM
Support strengthening internal controls and regulatory alignment




Promote a strong risk culture and cross-functional collaboration
Requisiti fondamentali
4-6 years in ERM, Internal Control, ICT Risk or equivalent
Degree in economics, finance, engineering, law, mathematics, statistics, computer science or related field
Strong knowledge of risk assessment methodologies and core processes
Familiarity with COSO ERM, ISO *****, COBIT, ISACA guidance and regulatory frameworks
Knowledge of regulatory requirements affecting enterprise, ICT and operational risk (e.g., DORA, EU AI Act)
Familiarity with ISO ***** and ISO ****
Experience defining, monitoring and analyzing KRIs and risk metrics
Ability to prepare structured reports and presentations for management
Enterprise-wide risk perspective across strategic, operational, financial, regulatory, technology, reputational and third-party risks
Project management and cross-functional coordination
Excellent written and spoken English
Critical thinking and constructive challenge
Systems thinking with enterprise-wide perspective
Strong analytical and problem-solving abilities
Risk assessment methodologies
KRIs and risk metrics development
ERM frameworks (COSO ERM, ISO *****)

📌 Erm Advisor Level (Bologna)
🏢 Crif
📍 Bologna