The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Operational Risk Analyst (Internal Promotion)
3-5 years as a Senior AnalystSkills to master
- Leading complex RCAs, designing initial control frameworks, mentoring junior colleagues informally, presenting findings to mid-level management, managing multiple workstreams.
You're ready to move on when
- Consistently delivers high-quality, defensible risk analyses and recommendations.
- Proactively identifies and flags emerging risks without being prompted.
- Demonstrates strong leadership potential and a desire to mentor others.
- Successfully manages stakeholder relationships, even when delivering challenging news.
- Takes ownership of entire workstreams and drives them to completion with minimal supervision.
- 2
Risk Specialist from another discipline (e.g., Financial Risk, IT Risk)
5-8 years in a specialist risk role, plus 2-4 years cross-trainingSkills to master
- Understanding operational processes and context, translating financial/IT risk principles to physical operations, learning specific CQHS regulations, building relationships with operational teams.
You're ready to move on when
- Deep understanding of risk management principles, even if in a different domain.
- Proven ability to quickly learn new operational contexts and regulatory landscapes.
- Strong analytical and problem-solving skills, adaptable to new types of data.
- Excellent communication skills to bridge gaps between different risk disciplines.
- A genuine passion for operational safety and compliance.
- 3
Operational/Engineering Manager with strong Risk Focus
8-10 years in operations/engineering, with 2-3 years focused on risk/safetySkills to master
- Formal risk assessment methodologies, regulatory compliance frameworks, data analysis and reporting tools, incident investigation techniques beyond immediate operational fixes.
You're ready to move on when
- Demonstrated experience in managing operational risks and implementing safety protocols in a hands-on capacity.
- A clear understanding of the challenges and realities of operational environments.
- Strong leadership experience and ability to influence peers.
- A desire to move into a dedicated risk role and apply their operational knowledge to broader risk strategy.
- Proven ability to analyse data and identify systemic issues, not just local fixes.