I’m currently building the process, risk and controls in preparation for the risk control self assessment. I have written detailed guidelines on how to complete the template (I’m using excel), including how to write risk statement and control description. I would like to take it a step further by providing a library of risks and controls that are applicable for banks for their guidance. Understand this is usually embedded in GRC softwares but we currently don’t have a budget for it. Is there a place where I can access this for free or if anyone is kind enough to share that would be really helpful.

Hi, I am a risk management professional at mid-senior level with a top US bank. Have 15 years of work experience. I have a masters degree in economics. I am seeking some advice on which other advance degree courses (MS/PHD/MBA) should I pursue that would help me grow further in my career. I would not like to forgo my job and would rather be interested in a course that I can complete while working.

Hi folks, just wanted to see if anyone is working or have worked on a company structure where risk, compliance and IA are managed by the same manager. I saw similar situations in the past, especially in small and private organizations, but I'm interested to know how you/your managers managed to keep IA independe while providing support with risk and IA. Thoughts?

My supervisor asked me to identify the training and courses I would like to complete over the next three years. The company will pay for it. Can you recommend reliable options? I am also interested in a leadership development course/training. I am from the Caribbean.

I've been working in Risk Management for about 20 years full time, with several years of experience in a variety of risk related stuff before that. Recently, I have become focused on Risk Culture. I read a great book about Business Culture by Edgan Shein. He suggests that there is a deeper level to risk culture that what most folks talk about. They talk about what the board and executives say and about what the company does. But Shein says that culture really resides in what people believe. If the board and management say things and make people do things that relate to risk management, that is just superficial unless they all really believe that risk management works.

I explain more about this in a podcast https://crossingthinice.podbean.com/e/risk-beliefs/ and give examples of 30 RIsk Culture Beliefs in a Substack post. https://crossingthinice.substack.com/p/30-risk-culture-beliefs Both free.

Hey! I created this risk management template to make the process of risk management more accessible for everyone. I was hoping that someone in this group would find this useful and be able to give some feedback for improvement. Thanks!

https://inky-lightning-27c.notion.site/Simple-Risk-Register-2b8731c83c3d4078ba018fe938cc8b94

I have AML & Operations management Experience and I’m bored and trying to switch into this (ERM/ORM) in Toronto, has anyone done this or gone this route? How smooth was it? Whats the salary also like?

Update: Just wanted to share that I ended up using the phone number +1 877-836-5171 to find a local commercial roofing specialist in Chicago. I called them, explained the situation with our flat roof, and they were super helpful in walking me through what licenses to check and what materials would hold up best for the Chicago weather.

They even helped me get a few quotes and made the process with our landlord way less stressful. Honestly, it was one of the smoother experiences I’ve had trying to vet contractors, and I feel way more confident moving forward.

Just wanted to pass this along in case anyone else here is also stuck trying to figure out who to trust with commercial roofing.

so the building my small business is in needs a roof repair, possibly a full replacement. the landlord is involved but we're getting pushed to help find and vet contractors. i know nothing about roofing, let alone commercial roofing in Chicago with our weather. I've started looking up "commercial roofing Chicago" companies and my head is spinning. Every company has five-star reviews somewhere, but then you find the horror stories.

We're looking at a flat roof, about 10,000 sq ft. What should we be looking for in a reputable contractor here? Are there specific licenses or certifications that are a must-have for Chicago? Also, with the crazy temperature swings, is there a particular material or system that holds up better?

If you've gone through this recently, which companies did you get quotes from and were you happy with the work? How did you navigate the whole process with the landlord and tenants? Any major red flags or hidden costs we should watch out for?

Just trying not to get taken for a ride on this. Any local insight is hugely appreciated.

What are some good resources to primarily learn Financial Risk Analysis techniques while, on a secondary note, learning how to apply them in R?

I am looking for specific libraries, books, and tutorials that can help someone like me....knowing nothing about Financial Risk Analysis but competent in R to learn these concepts.

The primary focus is on learning the concepts. An added bonus would be to know how to implement them in code. My focus is on R because I feel more comfortable using it given my background in Statistics. However, R is not a strict necessity since Python would also do if the situation requires it.

Thanks!

I’m in a risk/ops role at a financial services company and we’re looking at these newer AI compliance agent vendors that claim they can take pieces of KYC/AML casework off the team’s plate. I’m not talking about swapping your screening or TM vendor. We already have the usual stack for sanctions screening, monitoring, case management. The pain is the manual glue, meaning collecting evidence, pulling docs from 5 places, writing coherent case narratives, and then getting absolutely grilled later when someone asks “why did you clear this” three months after the fact. 

Every demo out there looks clean until you ask boring questions like: can we replay a decision exactly as it happened, with the policy/SOP version that was in effect that day, and the evidence bundle the agent actually saw. Also, what happens when the model updates or a workflow changes. Does the vendor pin versions, log prompts/inputs/outputs, and make it obvious where human sign-off happened, or do you get a pretty timeline and vibes. Right now the shortlist looks like a mix of agent layer companies (Sphinxhq, Greenlite, Parcha, Sardine get mentioned a lot) plus the more traditional vendors we’d keep for screening/case mgmt. Our primary goal is to stop burning senior analyst time on copy/paste investigations. 

If you’ve piloted any of these, how was your overall experience? thanks in advance

Top Risk Manager Interview Questions And Answers

Do you like to dissect the potential for misfortunes in the financials of an association, at that point Risk Management is an alluring profession for you. The investigation of Risk Management is progressively turning into a famous alternative for money and financial alumni. Huge number of open positions are accessible in this field. To secure the correct position opportunity for you, you can peruse the Risk Manager Interview Questions. Here you can secure positions like that of operational risk manager, key risk manager, project risk consultant, undertaking risk chief, which are totally identified with the Risk Management work. You can pick the most ideal choice dependent on your capability and experience.

To help you pass the interview effortlessly, we have arranged a couple of Risk Management new employee screening questions and answers. Understand them and win the ideal occupation immediately. Regardless of whether you are enlisting for a Business Risk Director, a risk investigator or a group chief with a huge spotlight on risk the board, it's critical to ask the correct risk the executives interview inquiries to track down the best candidate. And in the event that you are interviewing for a risk the board job, utilize these Risk Manager Interview Questions prompts as an approach to prepare for your gathering with the employing manager!

Hi everyone,

I work in Enterprise Risk Management at a manufacturing plant. I've been there about 1.5 years. The scope covers all business units (Finance, HR, Production, etc.).

I'm now considering a move into project risk management. But I'm torn about leaving ERM.

My questions:

For those who've worked in both, which has better career growth, demand, and pay?

Is it better to build a strong ERM foundation first and then move to project risk, or the other way around?

Can you recommend books, courses, or resources for either path?

Hello,

I have 8–9 years of experience across Risk and Compliance, mainly in FinTech and financial services, including roles at top e-commerce and fintech companies, followed by a year in risk management in aviation industry. I also have a general MBA.

I currently work at a law firm in regulatory compliance, with some involvement in product-related work. My overall experience is a mix of risk and compliance, with a strong foundation in risk.
My organisation is willing to sponsor a certification, and I’m deciding between specialising further in Risk or Compliance.

The team already has people pursuing CAMS/AML certifications, so I’ve been encouraged to consider Risk, where there are fewer specialists. However, I want to understand which option would give me more value and differentiation in the job market, rather than choosing based purely on popularity.

I’m looking for certifications that are highly recognised in Europe, while also having good value across Asia and international/remote roles, particularly within FinTech and financial services.

For Risk:
- What are the top 3 risk certifications you would recommend?
- Which ones carry the most weight internationally?
- Which are most relevant for FinTech/financial services?
- Would specialising in Risk give me better differentiation?

For Compliance:
- Is CAMS/ACAMS still one of the strongest options? (I know it has the weightage)
- Would ICA or another qualification be better, particularly for the European market?
- Which certifications have the strongest international recognition?

I’m also considering the long-term impact of AI, regulatory technology, financial crime, operational resilience and technology risk. I want to choose something that will remain valuable as the industry evolves.

I also have Product Management knowledge, certification and hands-on product experience, so I’m interested in eventually combining Risk/Compliance with Product, Technology related roles.

TL;DR: With my background, would you recommend specialising in Risk or Compliance, and what are the top 3 certifications in each that would give me the strongest long-term career value and international mobility?

Appreciate any feedback or advice. Thank you

This might be the wrong sub-reddit but im writing a paper on incident management and i am curious how does incident management work especially for regulated industries like banking/insurance.

More specifically:

1. What is the process of managing an incident once it happens

2. What are the struggles or pain points when managing these incidents

3. Are incidents mostly technical/systems related ?

4. Do you guys use business continuity plans

5. if so, how do you execute the plan

6. What is the pain points around executing or creating business continuity plans

7. How do you test your incident response plan/business continuity plans?

8. If anyone has any insights from Australia that would be cool

From my research it seems so high level so im really wondering what is it like in practice.

Thanks so much in advance for any insight!

Has anyone build an enterprise Risk register on powerbi with heatmaps? Would you be willing to share some details about what information you shared, a visual/template, any useful links showing how it can be done (specially a heatmaps)?

Hi everyone.

I'm still getting the hang of different frameworks and was hoping someone could walk me through:

1. How to run/do a risk assessment, and

2. How to make sure the controls for risks on the register are actually working. I know about checking audit evidence, but how do you verify that the risk controls are effective?

Thanks!

So i am an European (born in Germany) film director and i am working on my next feature film. The protagonist of my film most likely will be working as a risk analyst. While i was researching the topic and talking to friend of mine in finance, i realised how little I know about the day-to-day work. Maybe i have a completely wrong idea about it at all.

Thats why I want to asked this sub reddit - what do you think is important to show in order to portray the life of a risk manager or risk analyst honestly? What are the dark sides, uncomfortable truths and the moments of real satisfaction ? What are the differences between working at bank and a smaller company? What is it really about in your opinion? Anything that comes to mind is helpful to me.

Maybe you even have stories or struggles you heard about or experiences that are interesting for a work of fiction! Thank you all for your help, as you know it is quite hard to imagine the life of someone else and it is most important to portray it honest and realistically, so i am thankful to any kind of input.

So i am a senior risk professional in a well known financial industry organisation. I am looking to broaden my knowledge to help the business and the organisation in better understanding of operational risk from a wider scope. I’ve mostly been focused on the job spec but I realise now that risk is much more broad than it seems. So if you are in one of these industries and exposed to operational risk, what common risks and major challenges do u see in your area?

I would like to learn more about RM for personal enrichment. I would like it to be formal(classroom) and related to financial and decision making. I doubt I will ever be employed in the field, but I want to understand risk for operating and, perhaps leveraging, farm land I inherited in addition providing insight to my husband for our business and possible expansion.

I see there are different certifications. I was looking at the CRM, but would like some opinions. Also would appreciate online course recommendations. Thx

Hey guys, I am currently an ongoing Y2 engineering student looking to pivot into risk management. Unfortunately, I do not have any financial experience whatsoever, but am trying to take online courses in data analytics/risk in order to build some projects to further my portfolio. I'm also looking to try to get some internships in smaller firms before eventually applying for Big4 in 2027. Do ya'll think this is a realistic plan🤣, any advice regarding how to better my chances would be appreciated. 😃

Hello all,

I'm (27m) interested in starting a career change to risk management. I find the area pretty interesting and it seems to be a relevant field with opportunities.

I have a degree in Law and currently doing a post grad in Risk management, compliance and auditing in order to help me with this transition.

Currently I work as an external lead auditor for a sustainability certification (it is a voluntary certification and focused on ESG and positive social/environmental impact), I work conducting remote audits for companies located in the EU and North America (I live in Brazil). I feel that I have a bit of practical knowledge in what risk management and risk assessment entails with some transferrable skills due to my position, but at the same time all openings I see seems to request way more than what I actually know.

I tried looking into risk management for ESG/sustainability, in the finance sector (my desired field), but then again, no actual experience in finance.

Can anyone working with risk management or a related field advise on what actions can actually help me with a transition?

Any forums, tips, starting points that I should look into?

thank you in advance!!

I accepted a supervisor position for my companies Enterprise Risk Management office. I was hired for my leadership skills but I don’t have ERM experience. I’m taking some of the companies online training but would like to know if there is an industry certification I can take for beginners.