AI REGULATORY LEGAL ADVISOR

AI REGULATORY LEGAL ADVISOR Artificial Intelligence Governance & Data Protection CRIF S.p.
A. is the holding company of an innovative international group (the “CRIF Group”), specialising in credit information systems, business information, credit management solutions, decisioning systems, banking software, outsourcing and consulting services. Our clients primarily include financial institutions, insurance companies, utilities and businesses, which we support throughout the entire lifecycle of their relationships with their customers. To strengthen the Regulatory Function and support the Group in the implementation of its Artificial Intelligence governance framework, we are looking for an AI Regulatory Legal Advisor with a strong interest in the regulation of emerging technologies and a sound working knowledge of personal data protection law. Role and Responsibilities The successful candidate will join the Regulatory Function and provide legal and operational support on Artificial Intelligence governance and the implementation of the AI Act across the CRIF Group. In particular, the successful candidate will:
- Support the implementation and continuous development of the Group’s AI Governance framework, including policies, procedures, methodologies, templates and internal guidelines.
- Carry out and document regulatory and legal assessments relating to Artificial Intelligence systems and related use cases, including qualification of a system as an AI System, identification of CRIF’s regulatory role and classification of the applicable risk level.
- Support the management, maintenance and continuous updating of the inventory of AI systems, the related regulatory documentation and the evidence repository.
- Assist business functions, AI System Requesters and AI Delivery Teams throughout the entire lifecycle of AI systems, translating regulatory requirements into practical operational obligations.
- Support the preparation, review and maintenance of documentation required under the AI Act, including regulatory assessments, transparency information, instructions for use, fundamental rights impact assessments and conformity documentation.
- Coordinate the collection of information, actions and evidence from relevant stakeholders, monitor remediation activities and ensure appropriate follow-up of identified actions.
- Provide operational and documentary support to internal AI governance bodies, including the preparation of agendas, briefing materials, reports and meeting minutes, as well as monitoring decisions and related action items.
- Monitor developments relating to the AI Act, implementing measures, guidelines, technical standards and positions adopted by competent authorities, assessing their impact on the Group’s policies, processes, products and services.
- Support the review of contracts and agreements involving suppliers or partners that provide or utilise AI systems, models, platforms, datasets or AI-enabled services, with particular attention to regulatory responsibilities, transparency, auditability, data usage, intellectual property, confidentiality and contractual liability.
- Manage areas of interaction between AI regulation and personal data protection, including privacy by design and by default, data governance, lawful processing of personal data, transparency, DPIAs, LIAs, TIAs and data processing agreements, where relevant to the use case.
- Contribute to training and awareness initiatives on AI regulation, Responsible AI and Data Protection. Experience and Qualifications
- Law degree. Admission to the Bar will be considered an advantage.
- Approximately 2 to 5 years of experience in technology law, AI regulation, data protection, digital regulation, compliance or related areas, gained within multinational companies, consulting firms and/or law firms.
- Knowledge of the AI Act and familiarity with AI Governance principles, risk classification and compliance requirements throughout the lifecycle of AI systems.
- Working knowledge of the GDPR and key personal data protection principles, including accountability, transparency, privacy by design, data governance and impact assessments.
- Excellent written and spoken Italian and English. Soft Skills
- Strong analytical skills and the ability to translate complex regulatory requirements into practical operational guidance.
- Accuracy, methodical approach and attention to documentation, activity traceability and deadlines.
- Ability to manage multiple projects simultaneously within a rapidly evolving regulatory environment.
- Clear and effective communication with business, technical and management stakeholders.
- Proactive, collaborative and solution-oriented mindset.
- Ability to work effectively within international, multicultural and cross-functional environments. Work Location The position will be based in Bologna or Milan. Availability for national and international business travel is required.

What we offer
permanent contract T