The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Manager, Crisis & Business Continuity (L5)
3-5 years at L5Skills to master
- Mastering the management of a global resilience function, including budget oversight, team leadership, and presenting programme status to senior leadership. Proving your ability to lead complex incident responses.
You're ready to move on when
- Successfully managed a team of 10+ resilience professionals.
- Owned the P&L for a significant resilience function (e.g., £500K-£2M).
- Led the response to at least one major organisational incident.
- Consistently received positive feedback from C-suite on programme delivery and strategic insights.
- 2
Director, Enterprise Risk Management (from another organisation)
4-6 years at Director levelSkills to master
- Bringing a broad enterprise risk perspective, you'd need to quickly deepen your expertise in the specific nuances of crisis management and business continuity within our industry. Understanding our regulatory environment is key.
You're ready to move on when
- Demonstrated success in managing enterprise-wide risk frameworks.
- Strong understanding of operational risk and its intersection with resilience.
- Proven ability to influence C-suite and Board on risk-related matters.
- Quickly acquiring specific certifications in BCM/Crisis Management.
- 3
Head of EHS (Environmental, Health & Safety) (from a large organisation)
5-7 years at Head of EHS levelSkills to master
- You'd bring deep expertise in incident investigation, safety protocols, and regulatory compliance. The focus would be on expanding your scope to include broader business continuity and cyber resilience, and leading multi-disciplinary crisis teams.
You're ready to move on when
- Successfully managed large-scale health and safety incident responses.
- Strong track record in regulatory engagement and compliance.
- Demonstrated ability to build and manage EHS programmes across multiple sites.
- A clear understanding of the broader operational resilience landscape beyond traditional EHS.