How to become a risk analyst