The person responsible for creating project risk response strategies is not fixed. A project manager can assign a team member (or themselves), but the most important thing is that the chosen person understands the role.
Your risk manager will draw up a risk register, lead meetings, and update their strategy throughout the project where necessary. Your risk manager should report to the project manager or committee, depending on the team structure.