The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Chief Risk Officer (CRO) / Chief Compliance Officer (CCO) from a Financial Services or Highly Regulated Industry
5-10 years in CRO/CCO roleSkills to master
- Enterprise-wide risk management frameworks, deep regulatory expertise, board-level reporting, crisis management, and leading large, multi-functional teams.
You're ready to move on when
- Successfully navigated a major regulatory audit or investigation with a positive outcome.
- Led a significant transformation of an enterprise risk or compliance function.
- Demonstrable experience influencing Board decisions on strategic risk matters.
- Managed a budget of £5M+ and a team of 50+ individuals.
- 2
General Counsel / Chief Legal Officer from a Global Corporation
7-12 years in General Counsel roleSkills to master
- Corporate law, litigation management, regulatory affairs, ethical programme development, and strategic legal advice to the Board and executive team.
You're ready to move on when
- Successfully managed complex, multi-jurisdictional legal and regulatory challenges.
- Developed and implemented enterprise-wide ethical conduct programmes.
- Provided strategic legal counsel on major M&A transactions or market entries.
- Demonstrated ability to translate complex legal concepts into actionable business strategies.
- 3
Partner in a 'Big Four' Advisory Firm (Governance, Risk & Compliance Practice)
10-15 years as a PartnerSkills to master
- Client-facing advisory on GRC strategy, deep industry knowledge across multiple sectors, business development, and managing large-scale GRC transformation projects for diverse clients.
You're ready to move on when
- Led significant GRC transformation engagements for FTSE 100 or Fortune 500 clients.
- Built and managed a substantial book of business within the GRC advisory space.
- Demonstrated thought leadership through publications or industry speaking engagements.
- Proven ability to build and lead high-performing consulting teams.