the rest of my point is the same, if a bank has a chief risk officer, it's the President of the bank, or an EVP. There are quants who track, measure and calculate financial risk, but that's a line responsibility, they're not chiefs. If you want to call the President of a "financial risk banking company" the chief of something, he's CEO, not CRO, even though risk management is his main job.