Sensitivity analysis of expected shortfall by means of a second-order approximation