TPRM Advisor Senior
Bologna, IT
We are looking for a Third Party Risk Management Specialist to join our Global Procurement organization and take operational ownership of the Third Party Risk Management framework across Europe.
The role will ensure that supplier due diligence and risk controls are effectively performed throughout the supplier lifecycle, working directly with Procurement teams, suppliers and internal control functions.
A key objective will be to extend and standardize TPRM practices across European countries, ensuring consistent execution, monitoring and reporting and then extend the best practice to all the others CRIF Regions.
Key Responsibilities
Third Party Risk Management & DORA | ~60%
- Ensure that supplier due diligence is effectively completed by Procurement teams, monitoring execution and proactively intervening when required information, assessments or controls are missing or overdue.
- Oversee the correct classification and criticality assessment of suppliers, ensuring the appropriate level of controls based on supplier and service risk.
- Coordinate supplier assessments and evidence collection, working directly with vendors when escalation or remediation is required.
- Ensure appropriate management of ICT third-party risks and DORA-related requirements, including critical ICT services, subcontracting, concentration risk and operational resilience.
- Monitor identified risks, exceptions and remediation actions through to closure, escalating material issues where necessary.
European Roll-out & Stakeholder Coordination | ~25%
- Extend the TPRM framework and related controls across European Procurement organizations, driving a consistent approach to supplier due diligence and monitoring.
- Work with local Procurement teams to identify gaps and bring suppliers progressively into the common TPRM framework.
- Act as the operational connection between Procurement, suppliers, IT, Cybersecurity, Risk, Legal, Privacy and Business Owners.
- Help avoid fragmented assessments and duplicated requests to suppliers by creating a consistent supplier risk view.
Governance, Reporting & Improvement | ~15%
- Maintain visibility over supplier assessments, critical suppliers, outstanding controls, exceptions and remediation actions.
- Prepare quarterly reporting for the TPRM Board, highlighting key risks, overdue assessments, remediation status, critical suppliers, exceptions and emerging areas of attention.
- Define and monitor TPRM KPIs and ensure appropriate escalation of material gaps.
- Contribute to the continuous improvement and digitalization of the TPRM process.
The Annual Salary for this position starts from 36.000 gross per year.
The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.
The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.
Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.
We offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity