The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Resilience Specialist (Internal Promotion)
3-5 years as a Senior SpecialistSkills to master
- You'd have mastered owning major workstreams like the entire BIA cycle or the exercise programme. You'd be mentoring junior staff and making sound technical decisions independently. You'd have built a reputation for reliability and deep expertise.
You're ready to move on when
- Successfully led 2-3 complex departmental BIAs from start to finish.
- Designed and facilitated at least 5 significant tabletop exercises for various business units.
- Consistently identified and closed high-priority resilience gaps.
- Received strong feedback on mentorship and technical guidance from junior colleagues.
- 2
Experienced Business Continuity Manager (External Hire)
8-10 years in similar roles elsewhereSkills to master
- You'd bring a wealth of experience from another organisation, having managed their BC programme or a significant part of it. You'd be adept at navigating organisational politics and driving change in a different environment.
You're ready to move on when
- Managed a BCMS programme for a company of similar size/complexity.
- Proven ability to influence stakeholders and secure budget in a previous role.
- Demonstrated experience in a regulated industry with strong compliance requirements.
- Can articulate lessons learned from real-world incidents and how they informed your strategy.
- 3
IT Disaster Recovery Lead (Internal/External)
8-10 years in IT DR, with cross-over to business continuitySkills to master
- You'd have a deep technical understanding of IT systems and recovery, but you'd also need to develop a stronger business-centric view. The focus here would be on translating technical recovery into business impact and RTOs/RPOs.
You're ready to move on when
- Successfully led multiple IT disaster recovery tests and actual recoveries.
- Strong understanding of IT infrastructure, cloud resilience, and cyber security.
- Demonstrated ability to communicate technical concepts to non-technical business leaders.
- Proactively sought out opportunities to learn about business operations and their dependencies.