In current scenario, risk management is not about quant, in fact risk management was never about quant, a purely quantitative approach to risk management will be antithesis of risk management.
Risk management is not a science, it’s engineering, it is an art in itself which combines knowledge of mathematics, finance and technology, all three are equally important. Moreover it’s a job where you have to deal with a lot of people from different teams, it’s an exciting job if you like all that. But that’s when you can call yourself “risk manager”, for first couple of years your job can be not so exciting as you’ll be primarily involved in checking risk numbers, shooting mails here and there, and escalating IT teams and developers.
CFA definitely helps but the scope is limited to glittering your Resume and getting you interviews, though FRM will be more helpful in work as most of the time you’ll be dealing with derivatives.
In any case, an engineering undergrad + MBA > engineering undergrad + CFA > MBA > CFA in risk management.