Chief risk officers with non-financial risk backgrounds are increasingly well positioned to lead modern financial institutions as operational resilience, cyber risk, financial crime and culture move to the center of enterprise strategy, a senior banking e
The future of the chief risk officer
will increasingly be defined not by expertise in traditional financial risks
alone, but by the ability to lead organizations through an expanding landscape
of operational, technological and cultural challenges.
As non-financial risks continue to
dominate board agendas, the role is evolving from financial steward to
enterprise strategist, requiring broader commercial understanding, stronger
influence and deeper engagement across every part of the business.
Speaking at CeFPro's latest Risk
Evolve conference, the Chief Risk Officer of a major UK financial institution
argued that operational and non-financial risk experience provides an
increasingly relevant foundation for today's CRO.
While financial risks remain
fundamental, he suggested that cyber risk, operational resilience, artificial
intelligence, financial crime and third-party dependencies have fundamentally
changed the nature of enterprise risk management.
Reflecting on his own career, the
executive explained that he began in credit risk before moving into governance
and operational risk, a transition that ultimately shaped his leadership
approach.
He contrasted the relatively
structured nature of credit risk with the broader challenges presented by
operational risk, where professionals must understand how entire organizations
function rather than evaluating individual transactions.
“The question is no longer whether a
borrower can repay,” he said in effect, describing operational risk as asking
whether “the whole process” can fail.
That broader perspective, he argued,
equips future CROs with a more complete understanding of how organizations
operate and where vulnerabilities emerge.
The executive pointed to the changing
global risk landscape as further evidence that the profession has entered a new
era.
Referring to recent global risk
assessments, he observed that many of today's most pressing threats relate to
geopolitics, technology, cybersecurity, environmental issues and societal
change rather than traditional financial risks.
High-profile operational failures
across the banking industry have similarly demonstrated that weaknesses in
governance, culture and resilience can prove just as damaging as credit losses.
Rather than relying primarily on
technical authority, operational risk leaders spend much of their time
influencing others, facilitating discussions and persuading business leaders to
own their risks.
Those skills become increasingly
valuable at executive level, where successful CROs must balance effective
challenge with enabling commercial growth.
Commercial awareness, he stressed, is
therefore just as important as technical expertise.
“It's no use being a non-commercial
CRO,” he said. “The business needs to grow, so you need to facilitate that
growth in a safe manner.”
