Federal Reserve rules require every large bank holding company to appoint one chief risk officer. The rule was approved on February 18, 2014, under the Dodd-Frank Act. Today it applies to companies with $100 billion or more in assets.
The officer has two bosses. “The chief risk officer must report directly to both the risk committee and chief executive officer of the company.”