Having risk manager sign off on process changes and having it be automatically the first approval that occurs does not allow for flexibility of workflows and roles within an organization.
Ideally, the risk module configuration would have a toggle to enable/disable risk manager sign off on process changes.
A secondary request would be to allow the order of where the risk manager falls in the sequential approval to be editable.
While risk manager approval for a process or a group should be a toggle or switch on or off or something on that sort, can we also ensure if risk manager is not an approver then they are in Informed section (in RACI) for a process with a risk attached.