ERM Advisor Level
Overview
In this role you help shape and execute the enterprise risk management model, supporting risk monitoring, RAF governance, and KRIs. You will work with risk owners and functions to ensure a robust, compliant risk framework and reporting. You’ll analyze trends and events to inform management and governance bodies, strengthening internal control and risk culture. This position offers autonomy, cross-functional collaboration, and a meaningful impact on the company’s risk posture.
Responsabilità
- Support the definition and continuous improvement of the ERM framework
- Guide the RAF definition, monitoring and breach management
- Plan and run risk assessments using appropriate methodologies
- Facilitate enterprise risk identification, analysis, and monitoring
- Challenge assessments by Risk Owners and business functions
- Develop and monitor Key Risk Indicators and warning thresholds
- Maintain Risk Register and governance tools
- Track risk mitigation progress and effectiveness
- Analyze risk drivers from various domains (operational, regulatory, strategic)
- Prepare reports for management and governance bodies
- Contribute to evolving methodologies, templates and tools used by ERM
- Support strengthening internal controls and regulatory alignment
- Promote a strong risk culture and cross-functional collaboration
Requisiti fondamentali
- 4-6 years in ERM, Internal Control, ICT Risk or equivalent
- Degree in economics, finance, engineering, law, mathematics, statistics, computer science or related field
- Strong knowledge of risk assessment methodologies and core processes
- Familiarity with COSO ERM, ISO 31000, COBIT, ISACA guidance and regulatory frameworks
- Knowledge of regulatory requirements affecting enterprise, ICT and operational risk (e.g., DORA, EU AI Act)
- Familiarity with ISO 45001 and ISO 9001
- Experience defining, monitoring and analyzing KRIs and risk metrics
- Ability to prepare structured reports and presentations for management
- Enterprise-wide risk perspective across strategic, operational, financial, regulatory, technology, reputational and third-party risks
- Project management and cross-functional coordination
- Excellent written and spoken English
- Critical thinking and constructive challenge
- Systems thinking with enterprise-wide perspective
- Strong analytical and problem-solving abilities
- Risk assessment methodologies
- KRIs and risk metrics development
- ERM frameworks (COSO ERM, ISO 31000)
In this role you help shape and execute the enterprise risk management model, supporting risk monitoring, RAF governance, and KRIs. You will work with risk owners and functions to ensure a robust, compliant risk framework and reporting. You’ll analyze trends and events to inform management and governance bodies, strengthening internal control and risk culture. This position offers autonomy, cross-functional collaboration, and a meaningful impact on the company’s risk posture.
Responsabilità
- Support the definition and continuous improvement of the ERM framework
- Guide the RAF definition, monitoring and breach management
- Plan and run risk assessments using appropriate methodologies
- Facilitate enterprise risk identification, analysis, and monitoring
- Challenge assessments by Risk Owners and business functions
- Develop and monitor Key Risk Indicators and warning thresholds
- Maintain Risk Register and governance tools
- Track risk mitigation progress and effectiveness
- Analyze risk drivers from various domains (operational, regulatory, strategic)
- Prepare reports for management and governance bodies
- Contribute to evolving methodologies, templates and tools used by ERM
- Support strengthening internal controls and regulatory alignment
- Promote a strong risk culture and cross-functional collaboration
Requisiti fondamentali
- 4-6 years in ERM, Internal Control, ICT Risk or equivalent
- Degree in economics, finance, engineering, law, mathematics, statistics, computer science or related field
- Strong knowledge of risk assessment methodologies and core processes
- Familiarity with COSO ERM, ISO 31000, COBIT, ISACA guidance and regulatory frameworks
- Knowledge of regulatory requirements affecting enterprise, ICT and operational risk (e.g., DORA, EU AI Act)
- Familiarity with ISO 45001 and ISO 9001
- Experience defining, monitoring and analyzing KRIs and risk metrics
- Ability to prepare structured reports and presentations for management
- Enterprise-wide risk perspective across strategic, operational, financial, regulatory, technology, reputational and third-party risks
- Project management and cross-functional coordination
- Excellent written and spoken English
- Critical thinking and constructive challenge
- Systems thinking with enterprise-wide perspective
- Strong analytical and problem-solving abilities
- Risk assessment methodologies
- KRIs and risk metrics development
- ERM frameworks (COSO ERM, ISO 31000)