The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Internal Senior Auditor (L3)
3-5 years as a Senior AuditorSkills to master
- Leading multiple complex audit engagements, managing project timelines and budgets, effectively mentoring 1-2 junior staff, drafting high-quality audit reports, and presenting findings to mid-level management.
You're ready to move on when
- Consistently delivering audit projects on time and within budget with minimal manager oversight.
- Receiving strong positive feedback from junior staff on your mentorship and guidance.
- Proactively identifying and proposing solutions to complex audit issues, not just flagging them.
- Demonstrating strong influencing skills with business stakeholders, even when delivering challenging news.
- 2
External Audit Manager (Big 4 or Mid-Tier Firm)
3-6 years as an External Audit ManagerSkills to master
- Managing a portfolio of external audit clients, leading large audit teams, deep technical accounting knowledge (IFRS/UK GAAP), and managing client relationships at a senior level. You'll need to adapt to internal audit's advisory focus.
You're ready to move on when
- Successfully managing a portfolio of external audit clients, including P&L responsibility for engagements.
- Proven ability to lead and develop large audit teams (5+ people).
- Strong understanding of financial reporting risks and controls across various industries.
- A desire to move from compliance-focused external audit to a more value-add internal assurance role.
- 3
Risk & Compliance Manager (within Finance)
5-8 years in a risk or compliance roleSkills to master
- Deep understanding of operational risk, regulatory compliance frameworks, risk assessment methodologies, and experience in designing and implementing controls. You'll need to develop a more independent, assurance-focused mindset.
You're ready to move on when
- Proven experience in developing and implementing risk management frameworks and controls.
- Strong knowledge of relevant financial regulations and compliance requirements.
- Ability to identify and assess complex operational and regulatory risks.
- A desire to apply your risk expertise in an independent assurance capacity.


