AI REGULATORY LEGAL ADVISOR

• AI REGULATORY LEGAL ADVISOR
• Artificial Intelligence Governance & Data Protection

CRIF S. p. A.

is the holding company of an innovative international group (the “CRIF Group”), specialising in credit information systems, business information, credit management solutions, decisioning systems, banking software, outsourcing and consulting services.

Our clients primarily include financial institutions, insurance companies, utilities and businesses, which we support throughout the entire lifecycle of their relationships with their customers.

To strengthen the Regulatory Function and support the Group in the implementation of its Artificial Intelligence governance framework, we are looking for an

AI Regulatory Legal Advisor with a strong interest in the regulation of emerging technologies and a sound working knowledge of personal data protection law.

Role and Responsibilities

The successful candidate will join the Regulatory Function and provide legal and operational support on Artificial Intelligence governance and the implementation of the AI Act across the CRIF Group.

In particular, the successful candidate will

• Support the implementation and continuous development of the Group’s AI Governance framework, including policies, procedures, methodologies, templates and internal guidelines.
• Carry out and document regulatory and legal assessments relating to Artificial Intelligence systems and related use cases, including qualification of a system as an AI System, identification of CRIF’s regulatory role and classification of the applicable risk level.
• Support the management, maintenance and continuous updating of the inventory of AI systems, the related regulatory documentation and the evidence repository.
• Assist business functions, AI System Requesters and AI Delivery Teams throughout the entire lifecycle of AI systems, translating regulatory requirements into practical operational obligations.
• Support the preparation, review and maintenance of documentation required under the AI Act, including regulatory assessments, transparency information, instructions for use, fundamental rights impact assessments and conformity documentation.
• Coordinate the collection of information, actions and evidence from relevant stakeholders, monitor remediation activities and ensure appropriate follow-up of identified actions.
• Provide operational and documentary support to internal AI governance bodies, including the preparation of agendas, briefing materials, reports and meeting minutes, as well as monitoring decisions and related action items.
• Monitor developments relating to the AI Act, implementing measures, guidelines, technical standards and positions adopted by competent authorities, assessing their impact on the Group’s policies, processes, products and services.
• Support the review of contracts and agreements involving suppliers or partners that provide or utilise AI systems, models, platforms, datasets or AI-enabled services, with particular attention to regulatory responsibilities, transparency, auditability, data usage, intellectual property, confidentiality and contractual liability.
• Manage areas of interaction between AI regulation and personal data protection, including privacy by design and by default, data governance, lawful processing of personal data, transparency, DPIAs, LIAs, TIAs and data processing agreements, where relevant to the use case.
• Contribute to training and awareness initiatives on AI regulation, Responsible AI and Data Protection.

Experience and Qualifications

• Law degree. Admission to the Bar will be considered an advantage.
• Approximately 2 to 5 years of experience in technology law, AI regulation, data protection, digital regulation, compliance or related areas, gained within multinational companies, consulting firms and/or law firms.
• Knowledge of the AI Act and familiarity with AI Governance principles, risk classification and compliance requirements throughout the lifecycle of AI systems.
• Working knowledge of the GDPR and key personal data protection principles, including accountability, transparency, privacy by design, data governance and impact assessments.
• Excellent written and spoken Italian and English.
• Soft Skills
• Strong analytical skills and the ability to translate complex regulatory requirements into practical operational guidance.
• Accuracy, methodical approach and attention to documentation, activity traceability and deadlines.
• Ability to manage multiple projects simultaneously within a rapidly evolving regulatory environment.
• Clear and effective communication with business, technical and management stakeholders.
• Proactive, collaborative and solution-oriented mindset.
• Ability to work effectively within international, multicultural and cross-functional environments.
• Work Location
• The position will be based in

Bologna or Milan .

Availability for national and international business travel is required.

What we offer

permanent contract

The Annual Salary for this position starts from € 45.000,00 gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

We offer a safe and inclusive environment where colleagues are encouraged to think outside the box.

CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle.

We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity

Pursuant to Regulation (EU) 2016⁄679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process.

For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.