The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From IMS Manager / Head of EHS (Large Organisation)
Roughly 3-5 years in a similar senior management role.Skills to master
- Moving from managing a department to leading a business unit-wide function, P&L ownership, strategic board-level communication, and enterprise risk integration.
You're ready to move on when
- Successfully led a major compliance programme implementation across multiple sites.
- Consistently achieved strong external audit results with zero major non-conformances.
- Demonstrated ability to influence senior leadership on strategic safety or quality investments.
- Built and developed a high-performing team of managers and specialists.
- 2
From Senior Consultant (GRC/EHS Consulting)
Typically 5-7 years at a Principal or Senior Manager level within a reputable consulting firm, focusing on GRC or EHS strategy.Skills to master
- Transitioning from advisory to direct operational ownership and accountability, building internal teams, and navigating internal politics versus client engagements.
You're ready to move on when
- Led multiple large-scale GRC/EHS transformation projects for major clients.
- Developed and presented strategic recommendations to client C-suites.
- Managed project budgets of £500K+ and large consulting teams.
- Deep understanding of various industry sectors and their regulatory landscapes.
- 3
From Head of Legal / Regulatory Affairs (with operational focus)
Around 5-7 years in a Head of Legal or Regulatory role, particularly if it involved significant operational compliance oversight.Skills to master
- Expanding beyond purely legal interpretation to hands-on operational management systems, safety culture, and quality assurance processes. Developing a more proactive, preventative mindset.
You're ready to move on when
- Successfully navigated complex regulatory challenges and investigations.
- Developed and implemented company-wide compliance policies.
- Worked closely with operational teams to ensure regulatory adherence.
- Demonstrated ability to translate legal requirements into actionable business processes.