Historically, risk and compliance positions have been treated primarily as back-office control mechanisms. Documenting controls, creating audit trails and complying with regulatory reviews were all ...