Risk Auditor

A risk auditor examines how an organization handles the things that could harm it, such as fraud, errors, cyber threats, financial misstatements, or broken rules. You review processes, test whether controls are working, interview staff, and read records, and then you write up what you found with clear recommendations. Over a week you might plan an audit, visit a department, sample transactions, and meet with managers to discuss fixes. You need to be fair and independent, since your findings may be uncomfortable for the people you review.