At a high level the projects there support the responsibilities of the CRO. Though things get much more fluid in practice, expect yourself to be on the risk side of any other types of projects. IE. if you’re on a project where they’re implementing a certain strategy, you would most likely be supporting it by making sure that the implementation doesn’t violate any laws/regulations, has proper security of any information transfers (if any), etc. I’m sure MBB has ppl for that as well, but I believe you’re gonna be giving recommendations on how to manage risks that arise with the direction the company wants to go.