The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of Compliance / VP, Global Compliance
5-10 years at Director/VP levelSkills to master
- Enterprise-wide programme management, board reporting, executive influencing, global team leadership, crisis management, strategic regulatory engagement.
You're ready to move on when
- Successfully led a major compliance function across multiple regions or business units.
- Consistently delivered positive audit outcomes and managed significant regulatory interactions.
- Proven ability to build and develop a high-performing compliance team.
- Demonstrated strategic thinking in anticipating and mitigating emerging risks.
- 2
General Counsel / Head of Legal
5-10 years as General Counsel or equivalentSkills to master
- Deep legal expertise, litigation management, corporate governance, ethical leadership, strategic business partnership, cross-border legal complexities.
You're ready to move on when
- Successfully managed complex legal and regulatory challenges for a large organisation.
- Provided strategic legal advice to the CEO and Board on critical business decisions.
- Proven ability to build strong relationships with regulators and external legal counsel.
- Demonstrated leadership in ethical conduct and corporate governance.
- 3
Chief Risk Officer (CRO)
5-10 years as CRO or equivalentSkills to master
- Holistic enterprise risk management, risk appetite frameworks, quantitative risk modelling, capital management, strategic risk advisory to the Board.
You're ready to move on when
- Successfully designed and implemented an enterprise-wide risk management framework.
- Demonstrated ability to identify, assess, and mitigate diverse risks (financial, operational, strategic).
- Proven track record of advising the Board on risk strategy and appetite.
- Strong analytical skills and ability to communicate complex risk information clearly.