Hubbry Logo
search
logo

Chief risk officer

logo
Community Hub0 Subscribers

Chief risk officer

logo
Community Hub0 Subscribers
Write something...
Be the first to start a discussion here.
Be the first to start a discussion here.
See all
Chief risk officer

The chief risk officer (CRO), chief risk management officer (CRMO), or chief risk and compliance officer (CRCO) of a firm or corporation is the executive accountable for enabling the efficient and effective governance of significant risks, and related opportunities, to a business and its various segments. Risks are commonly categorized as strategic, reputational, operational, financial, or compliance-related. CROs are accountable to the Executive Committee and The Board for enabling the business to balance risk and reward. In more complex organizations, they are generally responsible for coordinating the organization's Enterprise Risk Management (ERM) approach. The CRO is responsible for assessing and mitigating significant competitive, regulatory, and technological threats to a firm's capital and earnings. The CRO roles and responsibilities vary depending on the size of the organization and industry. The CRO works to ensure that the firm is compliant with government regulations, such as Sarbanes–Oxley, and reviews factors that could negatively affect investments. Typically, the CRO is responsible for the firm's risk management operations, including managing, identifying, evaluating, reporting and overseeing the firm's risks externally and internally to the organization and works diligently with senior management such as chief executive officer and chief financial officer.

The role of the chief risk officer (CRO) is becoming increasingly important in financial, investment, and insurance sectors. According to Watson, the majority of CROs agreed that having only exceptional analytical skills is not sufficient. The most successful CROs are able to combine these skills with highly developed commercial, strategic, leadership and communication skill to be able to drive change and make a difference in an organization. CROs typically have post-graduate education with over 20 years of experience in accounting, economics, legal or actuarial backgrounds. A business may find a risk acceptable; however, the company as a whole may not. CROs need to balance risks with financial, investment, insurance, personnel and inventory decisions to obtain an optimum level for stakeholders. According to a study by Morgan McKinley, a successful CRO must be able to deal with complexity and ambiguity, and understand the bigger picture.

James Lam, a noted risk professional, is credited as the first person to coin the term. Lam is the first person to hold that position at GE Capital in 1993. The position became more common after the Basel Accord, the Sarbanes–Oxley Act, and the Turnbull Report.

A main priority for the CRO is to ensure that the organization is in full compliance with applicable regulations and to analyze all risk related issues. They may also be required to work alongside other senior executives such as with a chief compliance officer. They may deal with topics regarding insurance, internal auditing, corporate investigations, fraud, and information security. The responsibilities and requirements to become a chief risk officer vary depending on the size of the organization and the industry, however, most CROs typically have a masters-degree level of education and 10 to 20 years of business-related experience, with actuarial, accounting, economics, and legal backgrounds common. There are many different pathways to becoming a CRO but most organizations prefer to promote their own employees to the position internally.

A chief risk officer (CRO) is relatively considered a newer position in the board of directors. When comparing the function of a CRO to the rest of the officers, we find that there is a relationship with every other role. In other words, for a process in any department in a firm to be completed it has to be discussed with a CRO to clear it of potential risks. In general, the CRO has many crucial tasks to look for in any organization to better serve its needs and mitigate its risk. According to the Enterprise Risk Management Initiative, CROs need to find a way to balance risks and inventory decisions to obtain an optimum level for stakeholders and maintain a positive reputation regarding the firm. However, the job description of CRO there is more in depth, there are some general tasks which every CRO has to be familiar with, such as, understanding the concept of Enterprise Risk Management (ERM).

A chief risk officer must identify, assess, measure, manage, monitor and report every aspect of the risk function of new implementations of the firm. This task is important when translating the business requirements of the firm into business/reporting and system specifications. Also, the CRO's assistance is necessary when it comes to new developments. Risk Chiefs must be leaders in developing and improving management reporting as well as providing user training for in-house developed systems. In addition to developing policies and frameworks, the CRO is responsible for the training and supervision of employees. Another important task is managing the development of new risk policies and procedures and participating in local and global discussions to enhance security processes and standards.

The role of the CRO is still evolving as the scope of task is constantly changing. The increasing regulatory and legislative requirements of organizational compliance make the CRO one of the most important members of the management team. To be able to view risk in the context of the whole company and to organize different risk functions and tasks through the different entities of the organization is inevitable to the success of any structural planning.

The title of CRO is a fairly new position in a company that is continually evolving. The responsibility of a CRO can be supported by the CEO or CFO. However, having an independent position to mitigate risks close to the executive board is a real asset for the company. Although the title of CRO is fairly new, job titles such as CFOs and CEOs also have functions of a CRO. Related positions of a CRO include CEO, CFO, chief risk management officer, Risk Manager and Capital Manager. Although these related positions don't necessarily replace a CRO, they do hold job functions that are similar to those of a CRO.

See all
User Avatar
No comments yet.