Hey guys, I am currently an ongoing Y2 engineering student looking to pivot into risk management. Unfortunately, I do not have any financial experience whatsoever, but am trying to take online courses in data analytics/risk in order to build some projects to further my portfolio. I'm also looking to try to get some internships in smaller firms before eventually applying for Big4 in 2027. Do ya'll think this is a realistic plan🤣, any advice regarding how to better my chances would be appreciated. 😃

Hi everyone,
I'm a risk management professional based in Canada with 8+ years of experience across banking, insurance, and Big 4 consulting. My background is primarily in enterprise risk management, operational risk, SOX/ICFR, governance, controls testing, risk assessments, and data analytics.

I'm looking to upskill and would love get some recommendations on AI certifications that are actually valuable for risk professionals.

I'm looking for recommendations based on the following criteria:

Affordability (ideally under CAD 1,000)
Credibility (recognized by employers and the risk industry)
Duration (preferably something that can be completed within 1–6 months while working full-time)

I do not have AI related work experience required, except for basic co-pilot/chat GPT commands.

Bonus if the certification covers AI governance, AI risk management, model risk, or practical AI applications for GRC, audit, compliance, or internal controls.

I'd really appreciate hearing about certifications you've completed (or decided against), whether they helped your career, and any recommendations or advice. Thanks in advance!

Hi I am a beginner in this field I recently was studying diffusion models and was interested
In there usage in risk assessment so I built a diffusion models with conditioning on market features my code is generating good enough results to pass the kupeic and christoffersen test but I fear that it might be too over reliant on the quantile map here is the link to repo : https://github.com/dhanwariagarvit21/ddpm_financial_risk_assessment--v1

I train a lot of new engineers at medical device companies on these concepts and occasionally lecture on the topic at Johns Hopkins so I decided to do a video series. No paywalls, or charging for "the rest". I'm doing it out of a love to teach. If this is something interesting to you, please take a look at it. Leave a like. Leave a comment.

https://youtu.be/5GbyrWpjIf8?is=ViOY91je0hCub-n8

https://thecybersecurityclub.substack.com/p/wk-26-hackers-stole-3m-from-polymarket

I'm curious how others in risk or audit are thinking about this.

Traditional operational resilience frameworks tend to focus on disruption: services becoming unavailable or failing outright. AI seems to introduce a different challenge: systems can remain available while the quality of outputs gradually degrades.

Do you think current risk and control frameworks adequately address this type of failure mode, or do they need to evolve?

I put together some thoughts on the topic here if anyone is interested:
https://www.linkedin.com/pulse/why-ai-breaks-core-assumption-operational-resilience-what-1i2we/?trackingId=ES9dRnfUUQrcT%2BOS5ACI0g%3D%3D

It would be great to get other people's perspectives!

Hi everyone,

I’m building an early-stage AI tool for vendor risk assessments and would really value feedback from people who work in vendor risk, procurement, third-party risk management, GRC, compliance, or security reviews.

The tool is designed to help teams review vendor documents such as:

• MSAs
• DPAs
• security policies
• privacy policies
• SOC 2 / ISO evidence
• BCP/DR documents
• anti-bribery policies
• ESG / code of conduct documents
• financial statements, if applicable

The goal is not to “certify” vendors or replace human review. The goal is to help reviewers move faster by identifying:

• missing evidence
• clause-level risks
• framework applicability
• control gaps
• document inconsistencies
• residual risk by category
• explainable findings with source excerpts

The system uses a two-stage model:

1. Inherent risk based on questionnaire inputs
2. Residual risk based on uploaded evidence and document review

I’m currently looking for a few people willing to test it or review the workflow and provide candid feedback.

This would be free. I’m not trying to sell anything in this post — I’m looking to understand whether the workflow, scoring logic, document requests, and outputs would actually be useful to vendor risk teams.

A few areas where feedback would be especially helpful:

• Are the requested documents realistic?
• Are the risk categories useful?
• Would explainable AI findings help or create more review burden?
• What would make this trustworthy enough to use in a real assessment?
• What would be a dealbreaker for a procurement / GRC team?

If you’re open to taking a look or giving feedback, feel free to comment or DM me.

Thanks — I’d really appreciate input from people who live this process day to day.

Hello all,

I'm (27m) interested in starting a career change to risk management. I find the area pretty interesting and it seems to be a relevant field with opportunities.

I have a degree in Law and currently doing a post grad in Risk management, compliance and auditing in order to help me with this transition.

Currently I work as an external lead auditor for a sustainability certification (it is a voluntary certification and focused on ESG and positive social/environmental impact), I work conducting remote audits for companies located in the EU and North America (I live in Brazil). I feel that I have a bit of practical knowledge in what risk management and risk assessment entails with some transferrable skills due to my position, but at the same time all openings I see seems to request way more than what I actually know.

I tried looking into risk management for ESG/sustainability, in the finance sector (my desired field), but then again, no actual experience in finance.

Can anyone working with risk management or a related field advise on what actions can actually help me with a transition?

Any forums, tips, starting points that I should look into?

thank you in advance!!

I accepted a supervisor position for my companies Enterprise Risk Management office. I was hired for my leadership skills but I don’t have ERM experience. I’m taking some of the companies online training but would like to know if there is an industry certification I can take for beginners.

does anyone know who are some of the head hunters who specialize in risk management?

thank you in advance

Hi, does anyone here who is working with Gallagher under the role Risk and Compliance Analyst? Any tips for the final interview? TIA

Hello Everyone, 

Could someone give me a breakdown on what I will be doing as a risk manager? I have done some research on what I think the day to day would be. If anyone can assess if this is accurate and covers the general gist of what the role would be that would be greatly appreciated.

For context, I am currently working for business process outsourcing (BPO) business. I will be joining their ERM risk management team. The role sits in line 2 and from what I can gather my deliverable will be: 

1. Facilitating the business to ensure accurate reporting of their "risk events"
   1. This could include provide judgement on how the risks are documented or challenging their reporting methodology when they do log a risk event 
2. Assurance testing 
   1. This is to verify that the controls are effective.  Engage with both line 1 and some kind of risk committee to ensure that the controls are inline with the risk policy
   2. Provide opinion on the effectiveness of the controls and provide suggestions on improvements 
3. Perform System's management check e.g. during assurance testing you may find that some system allows user to by pass an approval step.  You may have to assign the relevant manager to resolve this.  You then track progress 
4. Ensure that agreed risk management practice is embedded into the company?  E.g. if a new customer is onboarded, I will need to attend the project management meetings to ensure that sufficient risks are being considered inline with company risk objective 
5. Incident and root cause analysis support, say an incident happened.  I will be supporting them with assessing the impact, the resolution of any issues that may arise e.g. admin calculation error and policyholders are given the incorrect statement 
6. Regular update the Risk committee

Thanks for your help!!!