risk management consultant job description