How important is the hiring of risk manager? What attributes a good and a bad risk manager?

What is your opinion on this?