The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of International Credit Risk (or similar enterprise risk domain)
5-10 years at this levelSkills to master
- Mastering the full scope of a specific major risk domain (e.g., credit, market, operational) at a global scale, leading large teams, managing significant P&L impact, and regularly engaging with the Board and regulators.
You're ready to move on when
- Successfully led a major risk transformation programme.
- Consistently delivered strong risk performance for a significant business unit.
- Recognised internally and externally as a subject matter expert and leader in your field.
- Demonstrated ability to influence executive-level decisions and manage complex stakeholder relationships.
- 2
Head of Enterprise Risk Management (ERM)
3-7 years at this levelSkills to master
- Developing and integrating a holistic ERM framework across all risk types, overseeing firm-wide stress testing, and coordinating regulatory responses across multiple risk functions. This role is often a direct precursor to CRO.
You're ready to move on when
- Successfully implemented a new enterprise-wide risk framework.
- Proven ability to manage and lead cross-functional risk teams effectively.
- Strong track record of presenting integrated risk reports to the Board and executive committees.
- Demonstrated ability to identify and mitigate systemic risks across the organisation.
- 3
Partner at a Major Financial Services Consulting Firm (Risk Practice)
5-10 years at Partner levelSkills to master
- Advising multiple financial institutions on their risk strategies, regulatory compliance, and risk transformation programmes. This builds broad industry exposure and strategic problem-solving skills at an executive level.
You're ready to move on when
- Successfully led major risk engagements for Tier 1 financial clients.
- Developed a strong client portfolio and reputation as a trusted risk advisor.
- Deep understanding of diverse risk management practices across the industry.
- Proven ability to influence C-suite executives and navigate complex organisational challenges.