Why might you want to cross over?
To start, I would argue that CIOs and CISOs are Risk Managers anyway. They don’t like to think of themselves in that vein, but this is a fact. The CIO and CISO want to maximize the value they can deliver with new projects that reduce the residual risk.
Many CIOs operate in dynamic transformational environments, often viewing the scenario they face as a situation where the glass is full or half-filled. A typical CIO can see the downside of a particular situation, but given their agenda for digital transformation, they must look at the upside more than the downside. On the other hand, the CISO can typically view the world with a slightly more negative lens and view the scenario as a situation where the glass is half-filled or empty. The Risk Management Executive should ideally be more similar to the CISO.
With that said, there are indeed many attributes that the CIO and CISO have that can be applied to a professional career as a Risk Management...