The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Head of ISO Management Systems (L5)
3-5 years at L5Skills to master
- Expanding scope beyond core ISO to broader GRC, developing a deeper understanding of business unit P&L, leading larger organisational change initiatives, and enhancing C-Suite influencing skills.
You're ready to move on when
- Successfully led a major IMS transformation project across multiple sites.
- Consistently delivered zero major non-conformances in external audits for several years.
- Mentored and developed multiple managers within their team.
- Proactively identified and mitigated significant business risks, presenting solutions to senior leadership.
- 2
From Director of Quality or EHS in a similar industry
5-8 years in a single-discipline Director roleSkills to master
- Developing expertise in the 'other' disciplines (e.g., if from Quality, building deep EHS knowledge), mastering integrated system design, and leading truly cross-functional compliance programmes.
You're ready to move on when
- Successfully led a large Quality or EHS function, achieving significant improvements in metrics.
- Demonstrated ability to influence across different departments and drive compliance initiatives.
- Possesses strong foundational knowledge of at least two ISO standards (e.g., 9001 and 14001).
- Proven ability to manage significant budgets and large teams.
- 3
From a Senior GRC/Risk Consulting Role
8-10 years in consulting, with 3-5 years at Senior Manager/Director levelSkills to master
- Transitioning from advisory to direct operational accountability, building and leading internal teams, and adapting consulting frameworks to the specific culture and constraints of an in-house role.
You're ready to move on when
- Led multiple large-scale GRC implementation projects for diverse clients.
- Demonstrated ability to translate complex regulatory requirements into practical business solutions.
- Strong client relationship management skills, transferable to internal stakeholder engagement.
- Experience in developing and presenting strategic recommendations to executive boards.