John is the CEO of a small startup, and he's responsible for overseeing the risk management function within the organization. Which of the following best describes John's role in this context?
A. John is an external lawyer.
B. John is the company's insurance agent.
C. John is a risk management consultant.
D. John is the risk officer.