Legal & Compliance · Risk hiring guide
A bank's market risk manager, a manufacturer's enterprise risk lead and a hospital's insurance and claims manager share a title but almost no screening criteria, so the first decision is which one you are hiring. Careerscape's recruiters work remotely across the U.S. and specialize by function, so a risk search is run by someone who knows the difference.
Three jobs
Settle which of these you are hiring before you write the posting. Many roles mix two, but one usually dominates.
Market, credit, liquidity and model risk at banks, asset managers and fintechs. Expect quantitative work: stress tests, limit monitoring and model reviews in Python, R or SAS. BLS counts this group as financial risk specialists, the benchmark for the pay figures below.
Builds the risk register, runs risk and control self-assessments, reports to the audit or risk committee and often owns vendor risk. In banks, vendor work follows the 2023 interagency guidance on third-party relationships. Strong candidates write well and hold their ground with senior leaders.
The corporate risk manager who buys insurance: renewals with brokers, claims, certificates of insurance, indemnity language in contracts and loss data in a risk management information system. Common in hospitals, universities, construction and public entities. Credentials here come from RIMS and The Institutes rather than GARP.
A mid-size company hiring its first risk manager often wants insurance and ERM in one person. That can work, but say so plainly in the posting and expect to pay for the scarcer half of the skill set.
Template
Written for an enterprise and operational risk manager at a mid-size company or regional bank. Keep the bracketed line that matches a financial or insurance-focused role and delete the other.
The risk manager identifies, measures and reports the risks that could hurt [Company]'s earnings, operations or standing, and works with business owners to keep them within the appetite the board has set. The role reports to [the Chief Risk Officer / CFO / General Counsel] and presents to [the risk or audit committee].
Credentials
No license is required to work as a risk manager. These four credentials are the ones that map most clearly to the three jobs above. Confirm status with the issuer, not the resume.
| Credential | Issuer | Best fit | What it takes | Upkeep |
|---|---|---|---|---|
| FRM (Financial Risk Manager) | GARP | Financial risk | Two exams (Part I: 100 questions; Part II: 80 questions; four hours each), then two years of risk-related work experience | Continuing education recommended (40 credits every two years) but not mandatory |
| PRM (Professional Risk Manager) | PRMIA | Financial risk | Pass the required PRM exams within two years; no experience needed with a relevant master's or the CFA, two years with a bachelor's, four years otherwise | Not stated on PRMIA's certification page |
| RIMS-CRMP | RIMS | Enterprise and insurable risk | Education and experience requirements, then a 120-question, two-hour exam; accredited by ANAB under ISO/IEC 17024 | 50 continuing education points every two years, at least 35 in professional development |
| ARM (Associate in Risk Management) | The Institutes | Insurable risk | Three courses (ARM 400, 401 and 402) plus Ethics 311, each with a 50-question exam | No renewal requirement listed by The Institutes |
GARP gives FRM candidates up to 10 years after passing Part II to submit their work experience, so someone who has passed both exams may not be certified yet. Ask which stage the candidate has reached. RIMS also offers the RIMS-CRMP-FED, a 170-question version for federal government risk roles. Source: GARP 2026 FRM Candidate Guide; PRMIA; RIMS; The Institutes.
BLS pay
BLS counts risk managers below the executive level as financial risk specialists, so these national figures fit the financial version of the job best. Enterprise and insurance risk managers are not broken out on their own.
Middle half of all workers (25th to 75th percentile)
The national median is $117,330. A senior analyst stepping into a first manager title prices between the 25th percentile ($83,980) and the median. A manager who runs a risk function at a large bank or asset manager sits at the 75th percentile ($158,250) or above, and the 90th reaches $196,110. For analyst-level pay, see our risk analyst salary guide. Annual pay, all U.S. employers, BLS Occupational Employment and Wage Statistics (May 2025), occupation: Financial Risk Specialists. BLS does not publish this title separately; the figures are for financial risk specialists, the closest BLS occupation, which can include other job titles. Closest Salary Guide page: Risk Analyst.
Interview
Ask for specifics. A good candidate names a risk, a number and a decision that changed because of their work.
Listen for: A concrete risk, how they sized it, who they told and how they framed it. Strong answers show they kept the working relationship and still got a decision on the record.
Listen for: Working with the process owner, choosing leading indicators rather than loss counts, and setting thresholds that trigger action. Be wary of indicators nobody ever acted on.
Listen for: Command of the third-party life cycle: planning, due diligence, contract terms, monitoring and exit. For bank roles, familiarity with the 2023 interagency guidance.
Listen for: Checking the data and model before raising alarms, knowing who owns the limit, and how the breach is documented, escalated and resolved.
Listen for: Claims and loss data, contractual risk transfer, safety programs, broker strategy and retention analysis. A candidate who only talks about premiums is a buyer, not a risk manager.
Where they work
Figures are for financial risk specialists in each metro, May 2025. A concentration above 1.0 means the role makes up a larger share of local jobs than it does nationally.
| Market | Jobs | Median pay · vs. U.S. | Concentration |
|---|---|---|---|
| New York City | 12,770 | $139,670+19% | 3.28 |
| Chicago | 2,360 | $105,370−10% | 1.27 |
| Philadelphia | 2,340 | $130,880+12% | 1.97 |
| Dallas | 2,320 | $103,760−12% | 1.40 |
| Charlotte | 1,880 | $133,530+14% | 3.37 |
| Los Angeles | 1,540 | $113,230−3% | 0.60 |
| Washington, DC | 1,400 | $126,510+8% | 1.09 |
| Atlanta | 1,400 | $104,850−11% | 1.18 |
| San Francisco | 1,380 | $167,440+43% | 1.41 |
| Phoenix | 1,310 | $101,990−13% | 1.34 |
| Boston | 1,120 | $132,580+13% | 1.01 |
| Miami | 990 | $104,500−11% | 0.85 |
| Minneapolis | 940 | $105,420−10% | 1.17 |
| Tampa | 810 | $98,820−16% | 1.37 |
| Denver | 740 | $118,620+1% | 1.13 |
| Detroit | 690 | $105,110−10% | 0.88 |
| Houston | 590 | $101,200−14% | 0.44 |
| Seattle | 550 | $134,330+14% | 0.64 |
| Pittsburgh | 530 | $99,680−15% | 1.17 |
| Providence | 490 | $103,470−12% | 1.67 |
| Buffalo | 470 | $96,980−17% | 2.13 |
| Austin | 430 | $108,410−8% | 0.81 |
| Baltimore | 390 | $119,720+2% | 0.70 |
| San Diego | 380 | $121,010+3% | 0.60 |
| Portland | 350 | $105,500−10% | 0.70 |
| Raleigh-Durham | 310 | $100,260−15% | 1.01 |
| Hartford | 300 | $100,950−14% | 1.21 |
| Nashville | 210 | $95,250−19% | 0.47 |
| Albany | 200 | $120,570+3% | 1.07 |
New York City alone counts 12,770 of the 66,000 financial risk specialists in the U.S., about one in five, and Charlotte's concentration (3.37) is even higher than New York's (3.28). Buffalo, Philadelphia and Providence are also well above average. San Francisco pays the most, with a median of $167,440, 43% above the U.S. figure. Houston, Nashville, Los Angeles and San Diego have thin pools for their size, so plan to recruit remote or relocating candidates there. Eighteen of the 29 metros pay below the national median. Financial Risk Specialists, by metro area, sorted by jobs. BLS Occupational Employment and Wage Statistics, May 2025; U.S. median $117,330. Concentration is the BLS location quotient: above 1.0 means the job is a bigger share of local employment than nationally.
Pitfalls
Most failed risk hires trace back to a choice made in the posting, not in the interview.
Asking for model validation, insurance buying and ERM in one role shrinks the pool to almost no one. Pick the dominant job and list the rest as nice to have.
Passing Part I is not certification. GARP requires both exams plus two years of relevant experience. Verify with GARP or ask to see the certificate.
Plenty of candidates have built dashboards. Fewer have changed a decision. Ask for a risk they escalated and what happened next.
For bank roles, ask how recent rule changes reach the candidate's program. In April 2026 the OCC and FDIC finalized a rule, effective June 9, that bars their examiners from criticizing banks on the basis of reputation risk. Strong candidates can say what that changes in their reporting and what it does not.
Risk managers are judged by what they put in front of committees. Ask for a redacted risk memo or set a short written exercise.
Request talent
Share the risk type, the reporting line, the credentials that matter and whether you want direct hire or contract help.
Looking for a job instead? Submit your resume or browse open jobs.
FAQ
A risk manager finds the events that could cost an organization money, operations or standing, estimates how likely and how costly each one is, and works with the people who own those risks to keep them within limits leadership has set. In a bank that often means credit, market and liquidity risk; in a company it can mean the risk register, vendors and insurance. O*NET lists analyzing new legislation for its effect on risk exposure and quantifying risk with statistical models among the core tasks.
It depends on the job. The FRM, from GARP, tests quantitative financial risk and suits bank, asset manager and fintech roles. The RIMS-CRMP, from RIMS, covers enterprise and insurable risk and is accredited under ISO/IEC 17024. Neither is legally required. For a role centered on buying insurance and managing claims, The Institutes' ARM can be more relevant than either. Ask for the credential that matches the work.
Whoever receives the reports must be willing to act on them. In a bank, place the role under the chief risk officer, independent of the business lines it reviews. Without a CRO, the CFO is a natural fit for insurance-heavy roles and the general counsel for ERM and compliance-heavy ones. Avoid reporting into a business line whose risks the role is supposed to challenge.
Yes, for defined work such as building a first risk register, preparing for a regulatory exam, clearing a vendor review backlog or covering a leave. Careerscape offers contract staffing and contract-to-hire for these cases, and direct hire or executive search for permanent leaders. A contractor can run the process, but someone permanent should own the risk appetite.
Browse open roles on our jobs board or send us your resume. It is free for job seekers, and your search stays confidential if you are currently employed. Tell us which kind of risk work you do, financial, enterprise or insurance, and which credentials you hold or are working toward.
Send us the role as you see it today. A recruiter who covers risk and compliance will help pin down the discipline before the search starts, and you review a pre-screened shortlist in our private Employer Portal.
How can we help?
We got it!
A recruiter will reach out shortly.
Application Submitted!
Thank you for applying. We'll review your application and get back to you soon.