The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Risk & Compliance Manager (L5)
3-5 years as a high-performing Risk & Compliance Manager, overseeing a significant function or programme.Skills to master
- Mastering strategic planning, managing larger teams (including managers), influencing executive-level stakeholders, and owning multi-million-pound budgets. You'll need to demonstrate a clear jump from functional leadership to business unit-wide strategic thinking.
You're ready to move on when
- Successfully led a major risk transformation project from concept to completion.
- Consistently exceeded departmental KPIs and delivered demonstrable risk reduction.
- Received strong feedback on your ability to influence and collaborate with executive peers.
- Developed and mentored several high-potential individuals into leadership roles.
- 2
From Lead Risk Specialist (L4) in a larger organisation
5-7 years as a Lead Risk Specialist in a much larger, more complex organisation, often managing a specific, critical risk domain (e.g., Head of Operational Risk for a division).Skills to master
- Broadening your expertise beyond a single risk domain to encompass enterprise-wide risk. Developing strong P&L understanding and the ability to integrate diverse risk functions. Proving you can operate at a strategic, business unit level rather than just programme management.
You're ready to move on when
- Managed a significant risk programme with a budget of £500K+.
- Successfully influenced senior leaders outside your direct reporting line.
- Demonstrated the ability to think holistically about risk across an entire business unit.
- Built and led a small team of specialists, showing management potential.
- 3
From Senior Consultant (Big 4 / Specialist Risk Consultancy)
10-15 years in a Big 4 or specialist risk consultancy, leading engagements for large, complex clients at a strategic level.Skills to master
- Transitioning from advising to owning the risk. This means building and leading an internal team, navigating internal politics, and being accountable for long-term outcomes, not just project delivery. You'll need to demonstrate operational leadership and cultural integration skills.
You're ready to move on when
- Successfully led multiple strategic risk engagements for FTSE 100/Fortune 500 clients.
- Managed large project teams and client relationships effectively.
- Developed a deep understanding of multiple industry sectors and their specific risk challenges.
- Demonstrated strong commercial acumen and the ability to translate strategy into tangible results.