The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of Compliance / VP of Risk & Compliance (Large Multinational)
5-10 years in this role before CCOSkills to master
- Enterprise-wide programme management, leading large multi-disciplinary teams, significant budget ownership, direct Board reporting experience, navigating complex M&A compliance.
You're ready to move on when
- Successfully led a major compliance transformation project across multiple business units.
- Consistently delivered on significant risk reduction targets and maintained a clean regulatory record for your domain.
- Recognised as a trusted advisor by the C-suite and Board, often consulted on strategic initiatives.
- Built and mentored a strong leadership pipeline within your function.
- 2
General Counsel / Head of Legal & Compliance (Mid-to-Large Company)
7-12 years in this role before CCOSkills to master
- Deep legal expertise across multiple domains, managing external legal counsel, litigation management, strategic legal advice to the Board, integrating legal and compliance functions.
You're ready to move on when
- Successfully managed complex legal and regulatory challenges with significant financial or reputational stakes.
- Demonstrated ability to integrate legal strategy with broader business objectives and compliance frameworks.
- Proven track record of building effective relationships with regulators and external legal stakeholders.
- Provided strategic legal counsel that directly influenced major business decisions.
- 3
Chief Audit Executive (CAE) / Head of Internal Audit (Large Multinational)
8-15 years in this role before CCOSkills to master
- Independent assurance, robust internal controls assessment, reporting directly to the Audit Committee, identifying systemic weaknesses, influencing corrective actions across the enterprise.
You're ready to move on when
- Successfully led and transformed an internal audit function, enhancing its strategic value.
- Identified and driven resolution of critical control weaknesses with C-suite and Board visibility.
- Demonstrated strong understanding of operational risks and business processes across the organisation.
- Built a reputation for independence, objectivity, and constructive challenge at the executive level.