Not completely sure about that:

"A risk officer typically anticipates and manages regulatory, operational, competitive or other risks faced by a firm."

That looks like _non-financial_ risks. If that was the role of the CRO at SVB, the risk for this event probably should have been with the CFO?