Roles and responsibilities of a risk manager in healthcare