The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Promotion from Lead Risk Assessor / Risk Principal (L4)
3-5 years at L4Skills to master
- Strategic programme management, team leadership (mentoring to managing), budget oversight, executive reporting, cross-functional influence.
You're ready to move on when
- Successfully led multiple complex risk programmes end-to-end.
- Consistently delivered high-quality, impactful risk assessments and recommendations.
- Demonstrated strong mentorship skills and the ability to develop junior team members.
- Proactively identified and proposed improvements to risk assessment methodologies.
- Gained credibility with senior stakeholders outside your immediate team.
- 2
Transition from Senior Manager in Internal Audit or Compliance
5-7 years in senior audit/compliance rolesSkills to master
- Deep understanding of proactive risk assessment frameworks (beyond control testing), business continuity planning, quantitative risk analysis, and strategic risk communication.
You're ready to move on when
- Experience leading audit engagements focused on operational or strategic risks.
- Demonstrated ability to identify systemic control weaknesses and propose robust remediation.
- Strong grasp of regulatory requirements and their practical application.
- Proven ability to manage and develop a team of audit or compliance professionals.
- 3
External Hire (Senior Manager/Director from another industry)
Direct entry with 12-16 years relevant experienceSkills to master
- Rapidly learning our specific industry's CQHS risks, understanding our organisational culture and political landscape, quickly building trust with key internal stakeholders.
You're ready to move on when
- Held a comparable leadership role in a complex, regulated industry.
- Brought a track record of driving significant improvements in risk management.
- Demonstrated strong leadership, strategic thinking, and influencing skills in previous roles.
- Ability to adapt proven risk methodologies to a new sector effectively.