The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of Internal Audit (Large Organisation)
5-7 years at Director levelSkills to master
- Enterprise risk assessment, Board reporting, team leadership (100+ staff), strategic planning, managing external auditor relationships.
You're ready to move on when
- Successfully led a major division's audit function or a global audit programme.
- Consistently received excellent feedback from the Board Audit Committee.
- Proven ability to influence executive leadership on critical risk matters.
- Demonstrated success in attracting and developing audit talent.
- 2
Head of Risk Management / Chief Risk Officer (CRO)
7-10 years in senior risk rolesSkills to master
- Deep expertise in all risk categories (credit, market, operational, reputational), regulatory engagement, risk appetite definition, enterprise risk framework implementation.
You're ready to move on when
- Successfully built or transformed an enterprise risk management function.
- Demonstrated ability to navigate complex regulatory environments.
- Proven track record of advising the Board on strategic risk decisions.
- Strong understanding of the interplay between risk, control, and governance.
- 3
Partner in a 'Big Four' Audit Firm
10-15 years to Partner, then 3-5 years as PartnerSkills to master
- Client relationship management, business development, deep technical accounting and auditing expertise, managing large engagement teams, regulatory compliance.
You're ready to move on when
- Managed a portfolio of complex financial services audit clients.
- Demonstrated thought leadership in audit or financial reporting.
- Strong network within the financial services industry.
- Proven ability to drive quality and deliver complex audit engagements.