Chief risk officer (CRO) job description

The chief risk officer is responsible for mitigating those business risks that can impact a firm’s profitability. This person also deals with enterprise risk management issues, reducing those risks that can shut down operations. A chief risk officer has to work through department managers to adjust policies and procedures for risk reduction purposes.

The precise nature of the job can vary considerably, depending on the nature of the industry in which the job is located and the size of the organization. For example, a CRO position in the banking industry will require an extensive knowledge of banking activities and regulations, which would be unnecessary if the position were located in a manufacturing entity.

Related AccountingTools Courses

Business Insurance Fundamentals

Enterprise Risk Management

Basic Function

The chief risk officer position is accountable for the risk management operations of the company, to include the integration of risk concepts into strategic planning, and risk identification and mitigation activities. Principal accountabilities are:

  • Create an integrated risk framework for the entire organization

  • Assess risk throughout the organization

  • Quantify risk limits

  • Develop plans to mitigate risks

  • Advise on directing capital to projects based on risk

  • Assist functional managers in obtaining risk mitigation funding

  • Monitor the progress of risk mitigation activities

  • Create and disseminate risk measurements and reports

  • Communicate to key stakeholders regarding the risk profile of the business

The CRO may be assigned a number of additional tasks besides the main ones already noted. They include:

  • Oversee insurance. Decide upon the types and specifics of the various insurance policies that the organization should buy. This includes being the contact person for the insurance providers.

  • Recommend insurance alternatives. Recommend any alternative insurance features that are not currently being used, or suggest using insurance products that are entirely new to the company.

  • Manage claims. Supervise the filing of insurance claims, monitor their progress with insurers, and verify that payments have been received.

  • Conduct due diligence. Investigate the risks inherent in a target company that may be acquired, as well as the state of its risk management practices.

Desired Qualifications

The candidate chief risk officer should have a master's degree in business administration, or equivalent business experience and 10+ years of progressively responsible experience for a major company or division of a large corporation.  Should have experience in partnering with an executive team, and have a high level of written and oral communication skills, as well as a strong knowledge of processes.

Working Conditions

Will work in an office environment. Extensive travel to company subsidiaries will be necessary.

Related Article

Disaster Recovery Plan