I don't know of either such requirement. That said, your Risk Officer may include duties that require designation and approval (security/BSA/etc), but I know of no such requirement for a "risk officer."
Your internal policies may also have guidelines for you to follow.
_________________________
Adam Witmer, CRCM
All statements are my opinion, not those of my employer, and should not be taken as legal advice.
www.compliancecohort.com