The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Head of Risk for a Major Business Unit (Internal)
3-5 years as a Lead Risk Architect or Manager of Global Risk Strategy.Skills to master
- Deep understanding of the specific business unit's operations, strong stakeholder management across functions, proven ability to lead and deliver complex risk programmes.
You're ready to move on when
- Successfully led 2-3 enterprise-wide risk initiatives.
- Consistently received high ratings for strategic influence from senior leaders.
- Developed and mentored at least two junior professionals into more senior roles.
- 2
Senior Risk Consultant (External)
5-8 years in a 'Big Four' or specialist risk consultancy, advising multiple clients at a senior level.Skills to master
- Broad exposure to different ERM frameworks, strong client relationship management, ability to quickly diagnose and propose solutions for complex risk problems.
You're ready to move on when
- Led significant risk transformation projects for major clients.
- Demonstrated ability to build and manage large project teams.
- Proven track record of business development and thought leadership.
- 3
Head of Compliance or Head of Audit (Internal/External)
4-7 years in a senior leadership role within a compliance or internal audit function.Skills to master
- Deep regulatory knowledge, strong governance and control expertise, experience in interacting with Boards and regulators.
You're ready to move on when
- Successfully managed a significant compliance programme or audit function.
- Demonstrated ability to identify and remediate material weaknesses.
- Proven track record of effective communication with external auditors and regulators.