Compliance Coffee Talk · January 2026
Advice for the risk management career path
Megan Damato of Greenwich, Connecticut, and Heather Hammons-Riordan of Forsyth County, Georgia, on how they got into risk management, which certifications are worth it, and how to grow into more responsibility.
Guest experts

Megan Damato
Director of Risk Management, Town of Greenwich, CT

Heather Hammons-Riordan
Director of Safety & Risk Management, Forsyth County Government

John Rote
Host
The session
Two risk leaders who took different paths
Megan Damato has been the risk manager for the Town of Greenwich, Connecticut, and its public schools since 2017. She is an attorney, practiced law for about ten years, and worked in the town's law department before moving into risk. She won PRIMA's Public Risk Manager of the Year award in 2021.
Heather Hammons-Riordan has worked for Forsyth County, Georgia, for 20 years and has led its risk and safety program since 2017. She started in property and casualty insurance, moved up through county claims, and is vice president of the Georgia PRIMA chapter.
In January they joined John Rote to answer questions risk managers sent in about growing a career. Watch the full conversation, or read the takeaways below.
Key takeaways
18 takeaways from the session
Grouped by the questions attendees asked, from how Megan and Heather got started to when it makes sense to take a new job.
01–02
Two paths into risk management
Megan came to risk from the law. Heather came up through insurance and claims. Both had help along the way.
- 01
Learn from the risk manager you already work with
Megan met Greenwich's risk manager while working on claims in the town's law department. He mentored her, told her she would be great at the job, and let her work under his wing. By the time he retired, she was qualified to apply for his position, though she still had to apply and gather recommendations to win it.
The takeaway: If risk management interests you, work closely with your organization's risk manager now. That relationship can become your way in.
- 02
Claims work is a strong foundation
Heather started as a property and casualty agent and specialty underwriter, then moved into city and county government. She joined Forsyth County's risk department as a claims administrator, became a senior claims administrator, and was promoted to risk and safety manager in 2017.
The takeaway: Handling claims shows you how losses happen and what they cost. Heather calls experience from the ground up the most valuable credential you can have.
03–05
What the job is really like
Both guests talked about how often the job asks you to switch gears, and how much it rewards getting ahead of problems.
- 03
Expect constant triage
Heather compares the job to emergency room triage. At any moment she may need to move from a workers' compensation injury to a use of force claim, an EEOC complaint, or a flooded building. She describes day one as a 250-piece puzzle dumped on the table. Once you fill in the edges, the rest starts to come together.
The takeaway: No two claims look alike. Build habits that let you switch quickly, and give yourself time to see the whole picture.
- 04
Shift from reacting to preventing
In the law department, Megan spent most of her time reacting to lawsuits and claims. Risk management asked her to work ahead of problems instead. That mindset shift was the biggest change, and it suited her better.
The takeaway: Look for ways to prevent or reduce a loss before it happens, and let the teams built for reactive work handle what reaches them.
- 05
Know each department's business
Heather's team spends time in the trenches with county departments. Knowing how each one works helps them defend those departments in a claim, understand their exposures, and reduce losses up front. It has also earned them buy-in from department leaders.
The takeaway: Learn how each department actually operates. It makes you better at defending claims and at preventing them.
“I would rather try and prevent something or mitigate something before there's a problem than wait for there to be a problem.”
Megan DamatoDirector of Risk Management, Town of Greenwich, CT06–07
How the career path is changing
New risk managers have more help than ever, along with new exposures to watch.
- 06
Use AI as a tool, and train people first
Megan sees more risk management programs in schools, and more support from groups like PRIMA, than when she started. AI is the newest tool, but she warns that it is often wrong. Heather adds that everything a government does is discoverable, so work done with AI could lead to litigation no one can predict yet.
The takeaway: If your organization adopts AI, train employees on how and when to use it before they rely on it.
- 07
Keep watching for new exposures
Megan's police department posts on social media to stay transparent, and she reminds them to check what they share. Once, a minor's information was posted by accident. Heather points to cybersecurity, employment law and EEOC claims, and election-year politics as exposures that keep shifting, while Georgia's tort reform should help curb injury claims.
The takeaway: Review where your organization shares information, and revisit your top exposures as laws, technology, and politics change.
08–10
Are certifications worth it?
Attendees asked which designations are worth the time. The short answer is experience first, then the credential that fits your role.
- 08
Experience comes first
Heather's advice is time in the seat and learning from a mentor before anything else. Institutional knowledge, she says, is what makes a risk management team successful.
The takeaway: Don't wait for a designation to start learning. Hands-on claims and risk work builds knowledge that a course can't.
- 09
Match the designation to your role
If you handle workers' compensation, Heather recommends a certified workers' comp professional designation and a state license, which are reasonably priced. Claims administrators and adjusters should look at the Associate in Claims. Risk managers should consider the ARM, which Heather is finishing now and Megan plans to study for with a group of peers. A state adjuster's license and its 40 hours of pre-licensing also teach a lot.
The takeaway: Pick the credential that fits the work you do today and the role you want next.
- 10
Make the case, and ask about scholarships
Greenwich supports professional development, but Megan still shows how a course will help her do her job and benefit the town. PRIMA can help with the cost. Georgia PRIMA, where Heather is vice president, offers scholarships toward the ARM, Connecticut PRIMA offers scholarships too, and PRIMA offers classes at a discounted rate.
The takeaway: Tie each certification to what it does for your organization, and check whether your local PRIMA chapter can help pay for it.
11–13
Moving up, and growing your people
Promotions come from trust, whether you lead a team or work as a department of one.
- 11
Earn trust by showing up
Heather says you can't move up without buy-in from departments and executives. Even as a claims administrator, she recommends ride-alongs to learn each department's operations and speak their language. She learned much of what she knows about law enforcement and public officials' liability that way.
The takeaway: Be present in good times and bad, and bring what you learn back to your executives so they see the value of a risk program.
- 12
Look for trust and passion
When deciding who is ready for more responsibility, Megan looks for someone she can trust, who takes the job seriously and loves the work. Heather looks for a fire in the belly: people driven more by the reward of the job than by the pay.
The takeaway: Give stretch opportunities to the people who show both trust and passion. They are the ones who keep growing.
- 13
Department of one? Build mini risk managers
Greenwich has about 60,000 residents, and Megan runs risk on her own. She relies on "mini risk managers" in other departments who are trained to spot risks and escalate the ones that need her. Heather's team gets extra help through a student internship with a local high school, posted like a regular job.
The takeaway: Train people in other departments to handle risks at their level, and look to local schools for extra support.
“I don't want to call it a popularity contest, but it becomes a trust contest more than anything.”
Heather Hammons-RiordanDirector of Safety & Risk Management, Forsyth County Government14–16
Making time for strategic work
One attendee's question ended with "Help!" in all caps. Both guests know the feeling, and both shared how they carve out time anyway.
- 14
Use metrics to make the case for resources
Heather starts with an honest conversation with herself: there will never be enough time in the day. Then she tracks the volume of work and the share of time spent in each area to justify more resources. Her team of three serves about 1,900 county employees, so everyone is cross-trained and can cover for each other.
The takeaway: Track where your time goes. Numbers make a stronger case for help than stress does.
- 15
Visit departments a little at a time
Megan is visiting every department to build a full risk register, a smaller-scale version of an enterprise risk management program. She told the comptroller it would take time. She also decides what not to chase: a $200 stop sign isn't worth her time to subrogate when she's the only person in the department.
The takeaway: Set expectations with your boss, schedule department visits in small steps, and be honest about which small tasks can wait.
- 16
Automate manual processes
Heather's biggest recommendation for getting strategic is a risk management information system (RMIS). It can manage certificates of insurance and claims, and connect with a TPA's system, so less of the work is manual.
The takeaway: Find the most manual parts of your process and look for a system that can take them on.
17–18
Big career decisions
The last questions covered whether to take a new job and what they wish they had known sooner.
- 17
Weigh risk versus reward
Heather has been with Forsyth County for 20 years. A neighboring county might offer a bigger title and more pay, but she weighs that against the relationships and respect she has built, and says she would stay. Megan changed careers inside the town, from law to risk, even though staying in the law department could have paid more. The better fit mattered more to her.
The takeaway: List the pros and cons the way you would assess any risk. Pay and title are only part of the picture.
- 18
Find mentors and resources early
Asked what they wish they had known earlier, both said the same thing: how many resources are out there. Heather wishes she had found more mentors when she started, so she wouldn't have felt like she was on an island. Both now mentor other risk managers.
The takeaway: Join your PRIMA chapter, ask for a mentor, and don't try to figure out the job on your own.
Join the next session
Bring your questions to the next Coffee Talk
Each month, experienced risk leaders answer questions from public sector and enterprise risk teams in a 30-minute conversation.
