As I've been saying for some time, what organizations really need is a CRO, Chief Risk Assessment Officer, who would also be an expert in probabilities and simulation.
Just thought I'd point out, actuaries can also do enterprise risk management. Also, a lot of organizations do have a Chief Risk Officer.
Stanford Professor Sam Savage (also of Probability Management) proposes that large firms appoint a "Chief Probability Officer." Here is a description from Douglas Hubbard's How to Measure Anything, ch. 6:
Hubbard adds some of his own ideas to the proposal: