The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Ethics & Governance Specialist (L3)
3-5 years as an L3Skills to master
- Independently leading complex investigations, designing and implementing significant programme improvements, effectively mentoring junior team members, and presenting to senior leadership.
You're ready to move on when
- Consistently delivering high-quality, defensible investigation reports without significant oversight.
- Successfully managing a key governance workstream (e.g., a specific policy review cycle) end-to-end.
- Receiving positive feedback on your mentorship and guidance of less experienced colleagues.
- Proactively identifying and proposing solutions for ethical risks or governance gaps.
- 2
From Legal Counsel (Specialising in Investigations/Compliance)
8-10 years post-qualificationSkills to master
- Understanding the operational side of compliance, transitioning from legal advisory to direct programme management, and developing internal stakeholder management skills beyond legal teams.
You're ready to move on when
- Demonstrable experience leading or advising on internal investigations from a legal perspective.
- A strong understanding of corporate governance frameworks and regulatory expectations.
- An interest in moving beyond pure legal advice to hands-on programme design and implementation.
- Ability to translate complex legal requirements into practical business processes.
- 3
From Internal Audit (Specialising in Governance/Risk)
8-10 years in Internal AuditSkills to master
- Moving from identifying control weaknesses to designing and implementing controls, developing a deeper understanding of investigative techniques, and focusing on proactive ethics culture rather than retrospective review.
You're ready to move on when
- Experience auditing ethics and compliance programmes and identifying significant control gaps.
- A strong grasp of risk management frameworks (e.g., COSO) and their application.
- A desire to move into a 'first line of defence' role, actively building and managing programmes.
- Strong analytical and problem-solving skills, with an eye for systemic issues.