The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of Compliance / Head of Legal & Compliance
Typically 5-8 years at Director/Head level before C-suite consideration.Skills to master
- Deep regulatory expertise within a specific domain, strong team leadership, proven ability to manage complex compliance programmes, effective stakeholder management with executive peers.
You're ready to move on when
- Successfully led a major compliance programme or regulatory response from end-to-end.
- Built and managed a high-performing compliance team of 20+ individuals.
- Consistently provided strategic advice to the CEO or Board on significant compliance matters.
- Demonstrated ability to influence cross-functional leaders without direct authority.
- 2
Chief Risk Officer (CRO)
Often 3-6 years as CRO before taking on combined CCO/CRO or broader executive roles.Skills to master
- Holistic enterprise risk management across all categories (strategic, operational, financial, compliance), strong quantitative analysis skills, board-level reporting on risk appetite and mitigation strategies, experience with risk culture transformation.
You're ready to move on when
- Successfully designed and implemented an enterprise-wide risk management framework.
- Effectively managed significant financial or operational risks that had company-wide impact.
- Presented comprehensive risk reports and recommendations to the Board Risk Committee.
- Demonstrated ability to balance risk-taking with strategic growth objectives.
- 3
VP / Group Head of Quality Assurance
Roughly 5-8 years at VP/Group Head level, often with a strong regulatory component.Skills to master
- Expertise in quality management systems (e.g., ISO 9001, Six Sigma), process optimisation, product lifecycle quality, regulatory compliance related to product/service standards, and leading large quality teams.
You're ready to move on when
- Successfully led the certification or re-certification of a major QMS (e.g., ISO 9001) across a large organisation.
- Significantly improved product/service quality metrics, leading to measurable business impact.
- Managed quality assurance for a complex product portfolio in a regulated industry.
- Demonstrated strong leadership in driving a culture of quality excellence.