Chief Risk Officer
Owns the view of what could go wrong across the whole company, and what is being done about the few that would actually hurt.
CRO also commonly means Chief Revenue Officer — the go-to-market seat on this site. In a company with both, spell them out.
Who to hire
The shape of person who does this job well — and whether you should be hiring it at all yet.
A seat in balance-sheet businesses — lenders, insurers, funds, anyone carrying credit, market or liquidity risk — and a function rather than a seat almost everywhere else. It aligns closely with the CFO, because most of its questions end in a number, and with compliance, which asks the narrower question of whether a rule was followed.
Education
Finance, actuarial, economics or engineering. Quantitative comfort is the floor; the harder skill is communicating uncertainty to people who want a single answer.
Experience
10+ years in risk within a comparable balance sheet, including one period when the risk materialised. Ask what their model missed.
Vertical / domain experience
Entirely domain: credit, market, liquidity, operational and insurance risk are different disciplines with different mathematics and different regulators.
What it pays, roughly
$118,851 median, Canada — for Managers in financial and business services, the closest occupation Statistics Canada actually measures, measured from $102,398 to $123,198 over 216,805 people. That occupation is broader than this role, so read it as an anchor, not a salary band — and note that a startup usually pays below it in cash and above it in equity.
Credentials and certifications
What exists, who issues it, and whether it means anything for this seat. A credential is evidence of a floor, never of judgment — and in a few of these roles it is a legal requirement rather than a nice-to-have.
| Credential | Issued by | When it matters |
|---|---|---|
| FRM — Financial Risk Manager | GARP | The standard credential in financial risk. |
| PRM — Professional Risk Manager | PRMIA | The other recognised financial-risk designation. |
| RIMS-CRMP | RIMS | Enterprise and operational risk rather than financial; relevant outside balance-sheet businesses. |
What this role does at each stage
The same title means three different jobs depending on how much money is in the bank. Read the stage you are at, then read the next one — that is what you are hiring toward.
Nobody. The founder keeps a short list of what would kill the company and reads it monthly.
Part of the CFO’s seat. The deliverable is that list, written down, with an owner against each line.
A seat where the balance sheet carries risk, or where a regulator requires an independent risk function.
Who it sits beside
A specialist seat is defined as much by the seats around it as by its own work — which hat it reports through, which one asks the adjacent question, and which one it must stay independent of.
Reports to the CFO or the board in most structures, and sits beside compliance without duplicating it. Where the two are merged, be explicit that one is about rules and the other about outcomes.
Can one person hold this and something else?
The whole point of the many-hats problem: which of these jobs merge safely into one person, and which merges quietly cost you money or control.
Merges well with
Risk and finance are one seat until the balance sheet is big enough that the same person cannot both take a position and judge it.
Keep separate from
Independence is the whole point: a risk function reporting to the person taking the risk is decoration.
Reading a candidate
What good looks like in an hour, and what should stop the process.
Good signals
- Can rank the risks and defend the ranking
- Says what they do not know
- Has escalated past their own boss
Red flags
- Produces a heat map and stops
- No scenario they consider plausible
- Measures risk only where data is convenient
What this role runs on
The software categories this seat lives in, each linked to the screen of who sells it — the incumbent, the challengers and what the lock-in is.