The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director/VP of Compliance & Risk (from a larger, more complex organisation)
5-10 years at Director/VP levelSkills to master
- Enterprise-wide programme design, global team leadership, board reporting, M&A due diligence, strategic regulatory engagement.
You're ready to move on when
- Successfully led a major compliance transformation project across multiple business units.
- Consistently delivered impactful presentations to a Board or Executive Committee.
- Managed significant regulatory interactions or crisis events with positive outcomes.
- Demonstrated ability to influence C-suite peers and drive cross-functional alignment on complex issues.
- 2
General Counsel / Head of Legal
5-10 years in a senior legal leadership roleSkills to master
- Strategic risk management beyond pure legal risk, operationalising compliance programmes, building a proactive regulatory engagement strategy, developing a 'speak-up' culture.
You're ready to move on when
- Expanded scope beyond legal advice to include proactive risk identification and mitigation.
- Successfully advised the Board on complex regulatory matters with significant business impact.
- Demonstrated leadership in cross-functional initiatives involving operational compliance.
- Built strong relationships with business leaders, moving beyond a purely advisory role.
- 3
Chief Risk Officer (CRO) / Chief Audit Executive (CAE)
5-10 years in a C-suite risk or audit roleSkills to master
- Deep understanding of operational compliance, quality management systems, health and safety regulations, ethical culture building, and direct regulatory relationship management.
You're ready to move on when
- Successfully integrated various risk domains (e.g., financial, operational, strategic) into a holistic framework.
- Demonstrated ability to translate audit findings into actionable, enterprise-wide compliance improvements.
- Proven track record of influencing executive leadership on risk appetite and mitigation strategies.
- Developed expertise in specific industry regulations relevant to our business.