The FRM from the Global Association of Risk Professionals is the credential built for this work. Candidates pass Part I (100 multiple-choice questions) and Part II (80 questions), then submit evidence of at least two years of relevant work experience before they are certified. A resume that says "FRM Part I passed" shows progress, not certification, so ask where the candidate stands.
The CFA charter from CFA Institute takes three exams and 4,000 hours of relevant experience over at least 36 months. It fits market and portfolio risk seats that sit close to investment teams. BLS says certification may enhance a financial analyst's professional standing but does not list it as required, so name these as preferred unless a client or regulator expects them.
O*NET marks SAS as a hot technology for financial risk specialists and Python, R, Excel, Tableau and Power BI as in demand; MATLAB also appears in its software list. Decide before you post whether the analyst will write and maintain model code, or run existing models and explain the results. They are different candidates, and a posting that asks for both narrows the pool for no gain.