Risk managers: are you being paid enough?