The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director, Global Risk Assurance (Large Financial Institution)
5-8 years in roleSkills to master
- Shaping annual assurance plans, managing relationships with executive committees, leading large multi-regional teams, and driving strategic initiatives like continuous monitoring.
You're ready to move on when
- Successfully led a significant transformation programme within an assurance function.
- Consistently received 'outstanding' feedback from the Board Audit Committee.
- Demonstrated ability to influence and challenge C-suite executives effectively.
- Managed a budget of at least £5M and a team of 50+ professionals.
- 2
Partner, Financial Services Risk Consulting (Big Four Firm)
7-10 years in roleSkills to master
- Developing and selling complex risk and assurance solutions to major clients, building a book of business, leading large client engagements, and deep expertise in multiple regulatory domains.
You're ready to move on when
- Proven ability to generate significant revenue (£5M+ annually) through client engagements.
- Recognised as a thought leader in a specific risk or assurance specialism.
- Managed large, complex client projects with significant reputational stakes.
- Strong network within the financial services industry at the executive level.
- 3
Chief Risk Officer (CRO) / Chief Compliance Officer (CCO) (Mid-sized Financial Institution)
5-7 years in roleSkills to master
- Owning the entire enterprise risk management framework, overseeing all aspects of regulatory compliance, and managing relationships with a broad range of regulators.
You're ready to move on when
- Successfully implemented or significantly enhanced an ERM framework.
- Directly managed major regulatory examinations with positive outcomes.
- Demonstrated ability to balance risk-taking with control requirements in a commercial context.
- Proven success in building and leading a multi-disciplinary risk and compliance team.