what is the role of risk manager in IT industry.mean what responsibilites he have?