The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Compliance Analyst / Officer
2-4 yearsSkills to master
- Regulatory interpretation, risk assessment, policy drafting, audit evidence collection, stakeholder communication.
You're ready to move on when
- You've successfully managed compliance for several projects, demonstrating strong attention to detail.
- You're known for your ability to explain complex rules clearly to non-compliance colleagues.
- You've shown a keen interest in technology and its ethical implications, perhaps by volunteering for tech-related compliance tasks.
- 2
Junior Risk Officer / Analyst
2-3 yearsSkills to master
- Enterprise risk management frameworks, risk quantification, incident response, control design, reporting to senior management.
You're ready to move on when
- You've consistently identified and assessed risks across various business functions.
- You're comfortable working with risk registers and proposing mitigation strategies.
- You've started to think about how emerging technologies, like AI, introduce new types of risk.
- 3
Data Ethics Intern / Junior Researcher
1-2 yearsSkills to master
- Ethical frameworks, data privacy principles, research methodologies, report writing, understanding of AI technologies.
You're ready to move on when
- You've contributed to research or projects focused on the ethical implications of data or AI.
- You can articulate complex ethical dilemmas and propose reasoned arguments.
- You're familiar with data governance principles and their importance.


