The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Systems Auditor (Internal)
3-5 years as a Senior/Lead Systems Auditor (L3/L4)Skills to master
- Leading complex audits, mentoring junior staff, presenting findings to senior management, developing audit programmes, and managing stakeholder relationships.
You're ready to move on when
- Consistently delivers high-quality, impactful audit reports without significant rework.
- Successfully led multiple multi-system audits, demonstrating strong project management skills.
- Recognised as a go-to expert for a specific CQHS domain or system.
- Has a track record of effectively coaching and developing junior team members.
- 2
External Audit Manager / Senior Consultant (GRC)
5-8 years in a management role at a Big Four or specialist GRC consulting firm.Skills to master
- Managing client engagements, leading audit teams, developing risk-based audit approaches, and advising clients on control design and compliance strategy.
You're ready to move on when
- Managed audit engagements for complex organisations, demonstrating strong client relationship skills.
- Proven ability to lead and develop audit teams in a fast-paced, client-facing environment.
- Deep expertise in applying various control frameworks and regulatory requirements.
- Strong commercial awareness and ability to articulate value.
- 3
Compliance or Quality Manager (from another industry)
8-12 years in a compliance or quality management role, ideally in a regulated industry.Skills to master
- Managing compliance programmes, interpreting regulations, implementing quality management systems, and leading teams. You'd need to quickly get up to speed on our specific systems and industry risks.
You're ready to move on when
- Successfully managed a compliance or quality function in a complex organisation.
- Demonstrated ability to interpret and apply complex regulatory requirements.
- Proven leadership skills in a highly regulated environment.
- A quick learner who can rapidly adapt their knowledge to our specific industry and systems.