The Role of Internal Auditor in Risk Management