The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director/VP of Outsourcing Compliance (Large Enterprise)
5-10 years at this levelSkills to master
- Building and leading multi-functional compliance teams, defining and implementing enterprise-wide compliance programmes, direct engagement with executive leadership and regulators, managing significant compliance budgets and initiatives.
You're ready to move on when
- Successfully led significant compliance transformations or navigated major regulatory challenges.
- Consistently delivered 'clean' audit reports and avoided major regulatory penalties.
- Recognised as a thought leader in outsourcing compliance within the industry.
- Proven ability to influence and advise the Board and C-suite effectively.
- Built a strong network of regulatory contacts and industry peers.
- 2
General Counsel or Head of Legal (with strong Compliance focus)
7-12 years at this levelSkills to master
- Deep legal expertise in corporate, commercial, and regulatory law, particularly as it applies to BPO. Experience in managing legal risk, litigation, and corporate governance, with a significant portion of their role dedicated to compliance oversight.
You're ready to move on when
- Successfully managed complex legal and regulatory challenges for a global organisation.
- Demonstrated ability to integrate legal and compliance strategies effectively.
- Proven track record of advising the Board and executive team on high-stakes legal and compliance matters.
- Strong understanding of BPO contractual frameworks and risk mitigation.
- 3
Chief Risk Officer (CRO) or Head of Enterprise Risk Management
5-10 years at this levelSkills to master
- Comprehensive understanding of enterprise-wide risk frameworks (operational, financial, strategic, reputational), experience in integrating compliance risk into a broader risk management strategy, and strong quantitative risk analysis skills.
You're ready to move on when
- Successfully designed and implemented enterprise risk management frameworks.
- Proven ability to identify, assess, and mitigate a broad range of organisational risks.
- Demonstrated capability to present complex risk landscapes to the Board and C-suite.
- Strong understanding of the interplay between compliance and other enterprise risks.