Nobody thanks the risk manager for the fire that didn't happen. You get paid to spot the problem before it's a problem, put a price on it, and talk a room full of busy people into doing something about it. This guide walks the ladder from first analyst seat to head of risk, and says plainly what gets people stuck along the way.
Read a handful of risk manager postings and you'll notice they describe two different jobs. In a bank, a lender or a fintech, the risk manager sits in the second line of defence and challenges the business on credit, market, liquidity or operational risk. You'll write limits, review risk and control self-assessments, and sit in the room when a loss event gets explained to a committee.
In a hospital system, a manufacturer, a university or a city, the same title usually means insurance and claims. You run the property and liability renewal with the broker, manage the claims administrator, chase certificates of insurance from contractors and decide what the company keeps versus what it transfers to an insurer. Some postings mix both under the banner of enterprise risk management.
The ladder below looks similar on both sides. The tools, the vocabulary and the people you answer to don't. Pick a side early, because a hiring manager in bank operational risk will read a claims background as a different career, and the reverse is also true.
You pull the data and build the reports other people argue about. That means loss event logs, key risk indicator dashboards, exposure schedules for the insurance renewal or limit utilisation reports for the credit committee. You're judged on accuracy and speed: does the number tie, did it land before the meeting, and did you flag the odd line instead of smoothing it over.
You start owning a slice of the risk register instead of feeding it. You run the self-assessment workshops with a business unit, write the first draft of the issue when a control fails, and handle the broker's questions on one line of cover. People judge you on whether the business owners trust you enough to tell you about problems early.
You own the framework for a business line or the whole company. You set risk appetite with senior leaders, decide which risks get escalated, run the insurance program or the second-line review calendar, and present to a risk committee. You're judged on two things at once: no surprises for the board, and no reputation as the person who blocks everything.
The ladder forks here. One branch goes to head of enterprise risk or chief risk officer, where you manage a team, report to the board and own the regulator relationship or the total cost of risk. The other branch stays expert: a senior specialist in model risk, market risk or a heavy claims portfolio, respected for depth rather than headcount. Both pay well, and the expert track suits people who never wanted to run budgets.
These words show up across risk manager listings, so use the ones you can back up with a real example.
The analysis is rarely the hard part. The hard part is telling a senior leader that their favourite project carries a risk they don't want to hear about, then doing it again next quarter when nothing has changed. You have influence, not authority, and a lot of your week goes into persuading people who outrank you.
There's also a lot of paperwork. Registers need updating, actions need chasing, and committee packs need rewriting until the chair is happy with the wording. If you want to build things, the closest you'll get is a cleaner dashboard or a better workshop format.
The upside is visibility. Few roles below the executive team get a regular seat in front of the board or its committees. Do that well a handful of times and people remember your name when a bigger seat opens.
Two habits separate the risk managers who get promoted from the ones who stay put. The first is writing short. A committee member reads your page on the train, so the risk, the owner, the decision needed and the deadline should all fit on it.
The second is knowing the business better than the business expects. If you understand how a loan gets originated, or how a warehouse actually loads a truck, your challenge lands as help instead of interference. Spend time on the floor, in the branch or on the call with the underwriter. It's the cheapest career move in this field.
9% of openings are fully remote.
$132,993 – $173,400
Typical range in the 30 of the newest 60 postings that list pay.
Not always. Bank and trading risk roles lean hard on finance, economics or quantitative degrees, because you'll be reading models and exposure reports. Corporate and insurance risk roles take people from insurance, law, safety, audit and operations, and care more about whether you've run a renewal or managed claims.
They overlap but they aren't the same job. Compliance asks whether the company is following a specific rule. Risk asks what could go wrong, how bad it would be and whether the business is comfortable carrying it. In smaller companies one person often covers both, so read the posting closely.
Match it to your side of the field. Market and credit risk teams in banks tend to recognise the FRM. Corporate and insurance risk teams know the ARM and the RIMS-CRMP. Check each provider's current exam and experience requirements before you pay for anything.
It depends more on exposure than on time served. Analysts who get put in front of business owners and committees early move up faster than ones who stay behind the dashboard. Ask for workshop and committee work as soon as you can handle it.