Risk Manager career path: from risk analyst to chief risk officer
Each step up the risk ladder, from risk analyst through risk manager and senior risk manager to head of risk and chief risk officer, with the credit risk road that joins at head of risk: what changes in the job, the gap to close, how to show it on your CV and in interviews, and a plan.
The cvscored team
Contents
The ladder at a glance
| Step | What you are measured on next | Typical time |
|---|---|---|
| Risk analyst to senior risk analyst | Analyses you own, from data to conclusion | 1 to 2 years |
| Senior risk analyst to risk manager | A risk type or a unit, and its reports | 2 to 3 years |
| Risk manager to senior risk manager | Methods, committees and juniors | 2 to 4 years |
| Senior risk manager to head of risk | The risk function and the appetite | 3 or more years |
| Head of risk to chief risk officer | Every risk of the firm, at board level | Several years |
| Credit risk analyst to credit risk manager | Credit decisions and the loan book | 2 to 4 years |
| Credit risk manager to head of risk | All risk types, not only credit | 3 or more years |
Many people reach risk from finance. Controllers who move into a bank's risk controlling bring planning and reporting; their own ladder, up to head of controlling and finance director, is on the controller career paths. Financial analysts bring models and forecasts, and their ladder through FP&A is on the financial analyst career paths.
Auditors know controls and evidence, and many become operational risk managers; the audit ladder itself is described on the auditor career paths. Next to risk in the second line stands compliance, whose ladder to chief compliance officer is on the compliance officer career paths.
Insurers measure their own risks with actuaries, who price policies, set reserves and work out capital, often beside the risk team; their road from actuarial analyst to chief actuary is on the actuary career paths.
Analysts who decide on single borrowers rather than model the whole loan book climb from junior credit analyst to chief credit officer on the credit analyst career paths.
On the insurance side, the people who accept or decline single risks for an insurer have a ladder up to chief underwriting officer, set out on the underwriter career paths.
From risk analyst to risk manager
Risk analyst to senior risk analyst
What changes: you own analyses from the data to the conclusion, such as a monthly risk report or a limit review, and answer the questions about them yourself.
The gap: statisticsDistributions, correlation, regression and back-testing, and knowing what a model cannot tell you. you can explain, clean data with SQLPull positions, exposures and loss events from the firm's databases without waiting for IT. and PythonScripts for data cleaning, risk calculations and models that others can rerun and check., and writing a conclusionExplain a risk and its number to people who must decide, without jargon and without fear. someone can act on.
On the CV and in interviews: the analyses and reports you owned, what you automated and what a finding changed. Expect a short exercise with data.
Plan (6 to 12 months): take over one recurring report end to end; automate one manual step; present one finding to your manager's committee.
Senior risk analyst to risk manager
What changes: you own a risk type or a business unit's risks: the methods, the limits, the reports and the talks with the business about them.
The gap: risk managementIdentify, measure, limit and report risks across a firm, and tie each to an owner and a control. across the whole cycle, the rules of your field such as Basel IIIThe international Basel framework for bank capital and liquidity, and how national rules apply it. from the international framework, and saying no with reasons.
On the CV and in interviews: the risk type or unit you owned, limits you set or reviewed, and a decision your view changed. Expect a case on a limit the business wants to exceed.
Plan (12 months): own one risk type's report and its limits; lead one new product review; start a risk certificate if your market values one.
Risk manager to senior risk manager
What changes: you set methods for others, sit in risk committees, lead projects such as a new stress test, and coach analysts and managers.
The gap: methods and models others rely on, reports to the supervisorCapital, liquidity and risk reports to the supervisor, correct, reconciled and on time., presenting to committeesPresent the risk report to the risk committee and the board: short, clear, with the decision asked for. and the first steps of leading peopleLead a risk team, set its methods and priorities, and stand by a view under pressure..
On the CV and in interviews: the methods you set, the committees you served, the projects you led and the people you coached. Expect a question on a model the supervisor challenged.
Plan (2 to 4 years): lead a method change from design to approval; take a seat on a risk committee; coach two analysts.
The credit risk road
Credit risk analyst to credit risk manager
What changes: from analysing borrowers to deciding on them within your authority, owning a part of the loan book, its ratings, watch lists and provisions.
The gap: credit riskJudge whether borrowers will pay: ratings, default and loss estimates, limits and the provisions they drive. judgement on larger and harder cases, rating models, expected credit loss and the workout of loans that go wrong.
On the CV and in interviews: the size and kind of portfolio, the decisions you made, watch-list cases you turned around and the quality of your book. Expect a borrower case.
Plan (2 to 4 years): take a growing credit authority; handle a workout case from start to end; learn the provisioning model behind your book.
Credit risk manager to head of risk
What changes: you answer for every risk type, not only credit: market, liquidity and operational risk report to you, and you set the methods for all of them.
The gap: market riskMeasure what price, rate and currency moves do to positions, set limits and explain the numbers. and liquidity you can challenge, operational and model risk, the firm's risk appetite and a team of specialists.
On the CV and in interviews: a wider scope you already took on, such as a stress test for the whole firm, and the people you led. Expect board-level questions.
Plan (3 or more years): lead a firm-wide project across risk types; deputise for the head of risk; present to the risk committee of the board.
Head of risk and chief risk officer
Senior risk manager to head of risk
What changes: you lead the risk function of a firm or a large unit: the appetite, the methods, the team and the reports to the management board and its supervisors.
The gap: a view across all risk types, the budget and people of a function, the supervisor's trust and the courage to stop a deal.
On the CV and in interviews: the function or unit you led, inspections and reviews, and decisions where your view held. Expect a case where the board wants a quick answer.
Plan (3 or more years): run the risk appetite review; lead the response to a supervisor's review; build a team across risk types.
Head of risk to chief risk officer
What changes: you sit in or report directly to the management board, own the firm's risk profile and appetite, and can stop decisions that exceed it.
The gap: strategy, capital planning, the supervisor at the highest level and the board's trust, often with the supervisor's approval of you in person.
On the CV and in interviews: the firms and risk types you covered, the appetite you set, and the crises you steered. Expect questions on capital, culture and independence.
Plan (several years): own the board's risk report; lead the capital and liquidity planning with the finance director; build the relationship with the supervisor.
This page describes these steps in plain words. It is not legal or regulatory advice: in many countries a chief risk officer of a bank or insurer needs the supervisor's approval, and the rules of your country decide.
Your CV for the next step
Moving up in risk shows on a CV as a wider view: from calculations, to a risk type, to the function, to the firm. Three rules:
- Write each title as the firm used it. The risk types and businesses under it show your level.
- Speak the next level's language. Analyst ads say "analysis", "data", "reporting"; manager ads say "limits", "methods", "committee"; head of risk ads say "risk appetite", "board", "supervisor".
- Tie a decision to every line. Limits set, losses avoided, models approved, reports the board uses.
| Skill | Weak line | Strong line, with proof |
|---|---|---|
| Head of riskLead a risk team, set its methods and priorities, and stand by a view under pressure. | Led the risk department. | Led a risk function of twelve covering credit, market and operational risk; the supervisor's review closed with no major finding. |
| Risk appetiteIdentify, measure, limit and report risks across a firm, and tie each to an owner and a control. | Responsible for the risk appetite. | Rewrote the risk appetite with the board; limits now cascade to every business line with monthly checks. |
| Stress test | Coordinated stress tests. | Led the firm-wide stress test across risk types; the result set the capital buffer for the next plan. |
| Loan bookJudge whether borrowers will pay: ratings, default and loss estimates, limits and the provisions they drive. | Managed credit risk. | Owned a corporate loan book with a growing authority; defaults stayed below plan through a downturn. |
Key takeaways
- The ladder runs risk analyst, senior risk analyst, risk manager, senior risk manager, head of risk, chief risk officer.
- Credit risk is a road of its own that joins at head of risk.
- Manager means owning a risk type; head of risk means the function and the appetite.
- Controllers, financial analysts and auditors reach risk from their own ladders, each on its own page.
- Top risk roles in banks and insurers often need the supervisor's approval; this page is not advice on it.
Frequently asked questions
- What comes after risk manager?
- Senior risk manager, then head of risk and, at the top of a firm, chief risk officer.
- Is credit risk a separate career?
- It can be: credit risk analyst to credit risk manager, with decisions on borrowers. It joins the general ladder at head of risk.
- Can controllers or auditors move into risk?
- Yes, both are common entries, especially into risk controlling and operational risk; their own ladders are on the controller and auditor career pages linked above.
- Do I need a certificate to move up?
- No law asks for one. Some ads name FRM or PRM; the scope you owned and the decisions you shaped count for more.
- What should my CV show for a head of risk role?
- The risk types and businesses you led, the appetite and methods you set, the supervisor's reviews, and the team you built.