The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Audit Operations Manager (Internal)
3-5 years as ManagerSkills to master
- Mastering team leadership, managing complex audit programmes, refining stakeholder management at a senior level, and demonstrating strategic thinking beyond individual audits.
You're ready to move on when
- Successfully led multiple high-profile audit engagements from planning to reporting.
- Consistently received strong feedback from C-suite and Board members on your presentations and insights.
- Developed and mentored a high-performing team, with clear succession planning in place.
- Demonstrated ability to drive process improvements and innovation within the audit function.
- 2
Senior Audit Manager (Big Four / External Audit)
5-7 years as Senior ManagerSkills to master
- Transitioning from external client-focused audit to internal, enterprise-wide risk management. Adapting to an internal political landscape and developing a deeper understanding of the specific business's operational intricacies.
You're ready to move on when
- Managed large, complex external audit engagements for financial services clients.
- Developed a strong network within the financial services industry.
- Proven ability to manage client relationships at a senior executive level.
- Demonstrated understanding of internal control frameworks and risk assessment methodologies from an external perspective.
- 3
Head of Risk Management (Internal)
3-5 years as Head of RiskSkills to master
- Broadening from audit-specific risk assessment to enterprise-wide risk management frameworks. Deepening understanding of quantitative risk modelling and risk appetite setting.
You're ready to move on when
- Successfully led the implementation or enhancement of an enterprise risk management framework.
- Proven ability to quantify and report on key risks across the organisation.
- Strong relationships with business unit heads and C-suite on risk-related matters.
- Demonstrated ability to influence risk-taking decisions at a strategic level.