The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Compliance Monitoring Specialist (L2)
2-3 years at L2Skills to master
- You'll need to have consistently owned a portfolio of controls, demonstrated strong independent execution, and started to identify and propose solutions to issues. Showing initiative beyond routine tasks is key.
You're ready to move on when
- Successfully managed multiple routine compliance reviews independently.
- Consistently delivered accurate and timely findings with minimal supervision.
- Proactively identified areas for process improvement within your scope.
- Started informally guiding or assisting newer team members.
- 2
From Internal Audit Analyst (Mid-Senior)
3-5 years in Internal AuditSkills to master
- You'll bring strong control testing and risk assessment skills. You'll need to adapt to the 'second line' perspective, which is more about ongoing monitoring and proactive advice, rather than just retrospective assurance.
You're ready to move on when
- Experience designing and executing audit programmes for various business cycles.
- Strong grasp of internal controls and risk management frameworks.
- Ability to draft clear audit findings and recommendations.
- A desire to move into a more advisory and preventative compliance role.
- 3
From Regulatory Affairs / Legal (Junior-Mid)
4-6 years in Regulatory Affairs/LegalSkills to master
- You'll have excellent regulatory interpretation skills. You'll need to develop practical control testing methodologies and gain hands-on experience in evidence collection and root cause analysis in an operational setting.
You're ready to move on when
- Proven ability to interpret complex regulations and legal texts.
- Experience translating regulatory requirements into practical business implications.
- A keen interest in moving from pure interpretation to practical implementation and assurance.
- Strong research and analytical capabilities.