Risk manager
A risk manager coordinates and supports the organisation’s risk-management process through expertise, reporting, challenge and monitoring. The role helps managers identify and assess risks, maintain consistent methods and escalate significant exposure. It does not remove operational managers’ ownership of risks or the board’s oversight responsibility, and it differs from internal audit’s independent assurance role.
Worked example
A risk manager combines divisional risk reports, challenges optimistic assessments and reports an unresolved supplier concentration to senior management. The purchasing manager remains responsible for the supplier response.
Common mistake
Making the risk manager the owner of every risk or asking internal audit to implement the controls it will later assess.
Where it appears in your exams
| Qualification | Exam | Relationship | Period |
|---|---|---|---|
| ACCA | SBL | Direct | September 2026–June 2027 |
