how to become a risk consultant