🧮 Enterprise Risk Manager

IT Service, Project & Business career path

Run the enterprise risk framework (ISO 31000 / COSO): risk appetite, registers, reporting and assurance.

Typical roles

• Risk Analyst
• Enterprise Risk Manager
• Head of Risk (non-financial)
• Chief Risk Officer

Suggested certifications, by phase

Foundation

• M_o_R Fdn M_o_R Foundation (3rd edition)
• ISACA IT Risk Fundamentals ISACA IT Risk Fundamentals Certificate
• PECB 27005F PECB ISO/IEC 27005 Foundation

Core

• M_o_R P M_o_R 4 Practitioner
• PMI-RMP PMI Risk Management Professional
• GRCP OCEG GRC Professional
• IRM ICERM IRM International Certificate in Enterprise Risk Management

Advanced

• CRMP DRI Certified Risk Management Professional
• PECB 27005LM PECB ISO/IEC 27005 Lead Risk Manager
• CRISC ISACA Certified in Risk and Information Systems Control
• RIMS-CRMP RIMS Certified Risk Management Professional
• PECB 31000LRM PECB ISO 31000 Lead Risk Manager

Mastery

• CRMA Certification in Risk Management Assurance

A suggestion, not a set of prerequisites — one or two certifications per phase is plenty.