The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Head of Operations for a large, regulated business unit
5-8 years in a similar roleSkills to master
- Deep understanding of operational P&L, managing large teams, driving production targets, and navigating commercial pressures while maintaining compliance.
You're ready to move on when
- Successfully led a major operational transformation project with significant compliance implications.
- Consistently delivered strong operational performance while maintaining an excellent compliance record.
- Demonstrated ability to influence and collaborate effectively with compliance teams in previous roles.
- 2
Director of Enterprise Risk Management (ERM)
5-7 years in a similar roleSkills to master
- Broad understanding of all enterprise risks (financial, strategic, cyber, operational), developing cross-functional risk frameworks, and reporting to the Board on overall risk posture.
You're ready to move on when
- Developed and implemented a robust risk assessment methodology that was adopted across multiple departments.
- Proven ability to translate operational risks into broader business impact and communicate effectively to executive leadership.
- Strong track record of collaborating with various risk functions (e.g., finance, IT, legal).
- 3
Senior Legal Counsel (Regulatory/Operations Focus)
8-10 years in a similar roleSkills to master
- Deep legal interpretation of regulatory texts, managing regulatory enforcement actions, and providing legal advice on complex operational compliance matters.
You're ready to move on when
- Successfully managed significant regulatory investigations or disputes.
- Provided strategic legal advice that directly influenced operational compliance policy.
- Demonstrated a pragmatic, business-oriented approach to legal risk management.