29 ott - Bologna
Crif
Overview
In this role, you will support the Head of Enterprise Risk Management to shape and run the ERM framework, monitoring the risk profile and KRIs. You collaborate with Risk Owners and business functions to assess, monitor and treat risks, ensuring a robust, governance-driven risk system. You will contribute to risk reporting, RAF management, and the continuous strengthening of internal controls and regulatory alignment. This position offers autonomy, cross-functional impact, and a chance to shape enterprise-wide risk practices in a dynamic environment.
Retribuzione / Benefits
- permanent contract
- salary starting from 40.000 euro gross per year
- inclusive and diverse work environment
Responsabilità
- Support the definition, implementation and continuous improvement of the Enterprise Risk Management framework
- Support the definition, monitoring and evolution of the Risk Appetite Framework (RAF) including breaches and escalations
- Plan, coordinate and perform risk assessment processes following the appropriate methodology
- Facilitate identification, analysis, assessment and monitoring of enterprise risks
- Challenge assessments conducted by Risk Owners and business functions
- Support the definition, evolution and monitoring of Key Risk Indicators (KRIs) and thresholds
- Contribute to management and maintenance of the Risk Register and other governance tools
- Monitor progress of risk mitigation actions and assess effectiveness
- Analyze trends, events, incidents, regulatory requirements, and emerging factors affecting risk profile
- Prepare periodic reports and documentation for management and governance bodies
- Contribute to evolution of methodologies, processes, templates and tools used by ERM
- Support initiatives strengthening the internal control system and regulatory alignment
- Promote a strong risk culture and effective cross-functional collaboration
Requisiti fondamentali
- 4-6 years of experience in ERM, Internal Control Systems, ICT Risk or equivalent
- Degree in economics, finance, engineering, law, mathematics, statistics, computer science or another relevant field
- Strong knowledge of risk assessment methodologies and core risk management processes
- Knowledge of COSO ERM, ISO 31000, COBIT, ISACA guidance and regulatory frameworks
- Knowledge of regulatory requirements affecting enterprise, ICT and operational risk management (DORA, EU AI Act)
- Familiarity with ISO 45001 and ISO 9001 standards
- Experience in defining and analyzing KRIs and risk metrics
- Ability to prepare structured reports and presentations for management
- Ability to analyze enterprise-wide risk including strategic, operational, financial, regulatory, technology, reputational and third-party risks
- Ability to manage projects and coordinate stakeholders across functions
- Excellent written and spoken English
- Critical thinking with constructive challenges
- Enterprise-wide perspective and systems thinking
- Strong analytical and problem-solving skills
- Knowledge of COSO ERM, ISO 31000, COBIT, ISACA guidance
- Regulatory compliance understanding (DORA, EU AI Act)
- ISO 45001 and ISO 9001 applications
29 ott - Stezzano
Nessun nome
29 ott - Bari
Società riconosciuta
29 ott - Bari
Società riconosciuta
29 ott - L'Aquila
Gruppo importante