Risk Management interview preparation

Questions

100

Traced to a firm

37

Firms

12

Updated

September 2026

Asked at

All firmsUBS14MSCI7BLBlackRock5FTFranklin Templeton3Oaktree Capital Management2Scotiabank2Jane Street1Moody's1Neuberger Berman1PIMCO1SSState Street1TSTruist Securities1

Topic

All topicsMarket risk and VaR14Tail risk and stress testing5Greeks and sensitivities5Credit risk11Counterparty risk and CVA6Operational risk5Model risk and validation6Regulatory capital7Liquidity risk and ALM6Statistics and quant foundations7Indian regulation7Risk governance and appetite4Markets and macro9Fit and career8

Level

AnyCoreIntermediateHard

Type

AnyTechnicalCaseBrainteaserMarket viewFit

1. 080What is the broad range of risks a bank faces, and what is the greatest one?Risk governance and appetiteIntermediatetechnicalUBSPrivate Wealth Management · New York · 2026

   Say this

   Credit, market, liquidity and operational are the four you capitalise, then interest rate risk in the banking book, conduct, model, strategic and reputational risk on top. The greatest is liquidity, because it's the one that kills a bank in days rather than years.

   Then walk it

   1. Credit risk is the largest by capital, usually 80 to 90 percent of a commercial bank's RWA, and it's the one that does most of the slow damage. Almost every banking crisis starts as a credit cycle.
   2. Market risk is small for most commercial banks and large for a trading house. Operational risk includes conduct, which has produced some of the biggest single losses in banking history.
   3. Liquidity risk is the answer to 'greatest', and the argument is about speed and irreversibility. A capital problem gives you quarters to raise equity or shrink. A funding problem gives you a day. Northern Rock, Lehman, Credit Suisse and SVB were all liquidity events at the end, whatever started them.
   4. The nuance that makes it a better answer: the cause is usually credit or rate risk and the mechanism of death is liquidity. So the greatest risk is the interaction, not any one silo. Solvency doubts cause funding to disappear, and forced sales turn doubts into insolvency.
   5. For a specific bank the answer changes and you should say so. For an Indian public sector bank it's concentrated corporate credit. For an NBFC it's asset-liability mismatch and wholesale funding dependence. For a custodian it's operational and technology risk. For a private bank it's conduct and suitability.
   6. The risk I'd flag as most underweighted relative to its importance: third-party and technology concentration. A handful of cloud providers, core banking vendors and payment rails now underpin the system, and that exposure sits in nobody's capital calculation.
   7. So my framing: capital protects you from credit and market losses, and only liquidity and governance protect you from the failure mode that actually happens.

   Where candidates lose it

   Listing risk types with no view. The question explicitly asks which is greatest, so refusing to pick is a fail. Pick liquidity, justify it on speed, then show sophistication by saying the cause is usually credit and the mechanism is liquidity, and that the answer depends on the institution.

   Expect next

   • Why liquidity and not credit?
   • What's the greatest risk for a private wealth business specifically?
   • Which risk do you think is most underpriced today?

   Reported by candidates at UBS (Private Wealth Management, New York, 2026). Source: Wall Street Oasis.

2. 081What is a risk appetite framework, and what makes one actually work?Risk governance and appetiteIntermediatetechnicalRegulatory reporting

   Say this

   It's the board's statement of how much risk the firm will take to pursue its strategy, translated into measurable limits that cascade down to desks. It works when it constrains a real decision. If no business has ever been turned down because of it, it's a document, not a framework.

   Then walk it

   1. The structure has three layers. Risk capacity, the maximum the firm could absorb before failing. Risk appetite, what the board chooses to take, deliberately inside capacity. Risk tolerance and limits, the operational thresholds that keep you inside appetite.
   2. It has to be expressed in metrics with numbers, not adjectives. 'We have a conservative appetite for credit risk' is meaningless. 'Maximum 15 percent of the loan book in any one sector, CET1 not below 12 percent in the adverse stress scenario, maximum 3 percent credit cost' is a framework.
   3. Cover the unquantifiable too, with zero-tolerance statements where that's honest: no facilitation of tax evasion, no business in sanctioned jurisdictions, no products sold to retail without a suitability assessment. Conduct appetite can't be a number, but it can be a boundary.
   4. Cascade is the hard part. The board sets firmwide appetite, which has to become desk limits, sector caps, product approvals and even individual mandates. The arithmetic of cascading rarely works cleanly because of diversification, and that allocation is a genuine judgement.
   5. Then the feedback loop: monitoring, escalation when you approach a threshold, and a defined process for breaching one. Amber triggers a conversation, red triggers a mandated action. If breaching a limit has no consequence, the limit isn't real.
   6. The test I'd apply, and I'd say this out loud: name a transaction the firm declined in the last year because of the risk appetite framework. If nobody can, it's decorative. That question is also the best one to ask a firm in an interview.
   7. The other failure mode is appetite drift. Limits get raised to accommodate whatever the business is already doing, so the framework ratifies behaviour instead of constraining it. The control against that is that increases go to the board risk committee with a documented rationale, not to a delegated authority.

   Where candidates lose it

   Describing capacity, appetite and tolerance as a hierarchy and never addressing whether it changes behaviour. The differentiator is the test: what did the firm say no to. And naming appetite drift, limits quietly rising to fit the business, shows you've seen how these decay in practice.

   Expect next

   • How would you cascade a firmwide appetite down to a desk?
   • How do you express appetite for conduct risk?
   • What do you do when the business wants a limit raised?
3. 082A new trading desk is being set up. How would you build its limit framework?Risk governance and appetiteHardsuperdayBank market risk

   Say this

   Start from the mandate, not from the metrics. Understand what the desk is supposed to do and how it makes money, then set limits that allow that strategy and block everything else. Then layer loss limits on top, because risk limits alone don't stop a desk bleeding.

   Then walk it

   1. First the mandate: which products, which currencies, which maturities, which counterparty types, and where the edge comes from. A market-making desk and a relative-value desk with identical VaR need completely different limits.
   2. Then the aggregate risk limit, usually VaR or expected shortfall, sized off the capital allocated and the expected return. A desk allocated 100 crore of economic capital with a target return might get 5 crore of VaR, and you sanity-check that the implied risk-return is credible.
   3. Then granular sensitivity limits, because aggregate VaR is nettable and hides structure. DV01 by curve bucket, gamma, vega by expiry and by strike bucket, credit spread sensitivity by rating, single-name concentration, and FX delta by pair. These are what a trader actually manages to.
   4. Then loss limits, which are separate and essential. A daily stop, a month-to-date and a year-to-date drawdown trigger, each with a defined action: reduce, review, or stop trading. Risk limits control exposure; loss limits control the bleed when the strategy is simply wrong.
   5. Then stress limits, because VaR won't catch the scenario that matters. A cap on loss under the prescribed stress scenarios, which is often the binding constraint for a desk selling tail options.
   6. Then the boundaries that aren't about size: a product whitelist, tenor caps, a concentration cap as a share of market open interest or average daily volume, and a liquidity limit on days-to-exit. New products need explicit approval, which is how you stop mandate creep.
   7. Calibration approach for a brand new desk with no history: use a comparable desk's profile, size conservatively, and review after three and six months against actual usage. A limit used at 20 percent is wasted capital; a limit at 95 percent every day is being managed to rather than respected.
   8. And the governance wrapper: who can approve an excess and at what level, pre-trade blocks where possible rather than post-trade reports, and an automatic escalation after a second breach in a rolling period. Say that, because it's where limit frameworks actually fail.

   Where candidates lose it

   Setting a VaR limit and calling it done. VaR nets, so a desk can sit inside it with enormous concentrated positions. The complete answer has aggregate, sensitivity, loss, stress and liquidity limits, plus a product whitelist. And the loss limit is the one candidates most often forget.

   Expect next

   • Why do you need loss limits if you already have VaR limits?
   • How would you calibrate the limits with no trading history?
   • The desk is at 95 percent of its limit every day. Good or bad?
4. 083A senior trader tells you your risk number is wrong, that you don't understand his book, and that you are blocking a profitable trade. What do you do?Risk governance and appetiteHardsuperdayBank market risk

   Say this

   Take the challenge seriously and hold the line separately. Those are two different things: he may genuinely be right about the number, and that doesn't change whether the trade is inside the limit. I'd work the number with him and escalate the limit question through the proper route.

   Then walk it

   1. First, assume he might be right. Traders often do understand their book better than the risk system does, and the most common cause of a disputed number is a real modelling issue: a mismapped risk factor, a stale correlation, a proxy that stopped working, a position booked in the wrong bucket.
   2. So I'd ask him to show me where the number is wrong, specifically. Which position, which factor, what the number should be. A trader who can point at it is doing me a favour. A trader who only says 'it's wrong' is negotiating, not correcting.
   3. Then separate the two questions out loud. Question one is whether the model is right, which I will investigate today. Question two is whether the trade is inside the limit as the approved model currently measures it. Until the model changes through governance, the limit applies to the number we have.
   4. I would not change a risk number under pressure in the moment. That's the whole point. If it's wrong, it gets fixed through a documented model change, which also fixes it for everyone else and leaves a record.
   5. I'd offer a route rather than just a no: a temporary limit increase through the market risk committee with the rationale documented, or a structure that achieves most of his economics inside the limit. Risk managers who only ever say no get worked around.
   6. On the tone: no escalating in public, no defending the number I can't explain, and no pretending to more certainty than I have. 'I don't know yet, I'll have it by four o'clock, and until then the limit stands' is a completely defensible position.
   7. And I'd escalate to my own management the same day, before it becomes a complaint about me. Not to report him, but because a senior trader disputing a control needs to be visible. If I lose the argument at the committee, that's a legitimate outcome I'll implement.
   8. The thing I'd say last, because it's what interviewers are listening for: the P&L of the trade is not my consideration. If the limit is wrong for the business, change the limit through governance. Profitable is not an exception.

   Where candidates lose it

   Either caving or digging in. Both fail. The answer they want separates the question of whether the model is right, which you investigate genuinely and fast, from whether the limit applies, which isn't negotiable in the moment. And you must say that profitability is not a reason to allow a breach.

   Expect next

   • What if you investigate and he's right?
   • What if your own boss tells you to let it through?
   • How do you build a working relationship with a desk that sees you as an obstacle?

Firm tags come from public, anonymous candidate reports on Wall Street Oasis: strong signal, not sworn testimony. Firms are named as the places a question was reported, not as partners of Fin Maverick. Answers are written for this page to show how to think out loud; they are not scripts to recite.