The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Manager/Principal Operational Risk
3-5 years in a managerial roleSkills to master
- Leading a large team (20+), managing multi-million-pound budgets, influencing C-suite decisions, designing enterprise-level risk frameworks, and direct regulatory engagement.
You're ready to move on when
- Successfully led a major risk transformation programme.
- Consistently delivered measurable improvements in risk posture for a significant business area.
- Built and developed a high-performing team that operates autonomously.
- Demonstrated ability to present compelling risk cases to executive committees.
- 2
From Head of Compliance/Safety (Large Organisation)
4-6 years in a head-of-function roleSkills to master
- Broadening from pure compliance to strategic operational risk, including risk quantification, business continuity, and a deeper understanding of financial impact. You'll need to show you can connect the dots beyond just the rules.
You're ready to move on when
- Successfully navigated complex regulatory audits with positive outcomes.
- Implemented significant compliance programmes across a large organisation.
- Demonstrated strong leadership in a highly regulated environment.
- Proven ability to influence business strategy from a compliance perspective.
- 3
From Management Consulting (Risk & Compliance Specialism)
5-7 years at Principal/Partner levelSkills to master
- Translating advisory experience into direct operational accountability, building and managing internal teams, and navigating internal politics. You'll need to show you can 'do' as well as 'advise'.
You're ready to move on when
- Led multiple large-scale risk transformation projects for diverse clients.
- Developed and presented strategic risk frameworks to client C-suites.
- Demonstrated strong commercial acumen and understanding of business drivers.
- Proven ability to build strong client relationships and deliver tangible results.