risk assessment consultant