The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Audit Manager (Large Organisation)
3-5 years as a Senior Audit ManagerSkills to master
- Strategic audit planning, executive stakeholder management, multi-project oversight, team leadership and development, influencing without direct authority.
You're ready to move on when
- Successfully managed a portfolio of complex audits with significant business impact.
- Consistently received positive feedback from executive stakeholders on audit reports and presentations.
- Demonstrated ability to develop and mentor Audit Managers and Senior Auditors.
- Led significant process improvements within the audit function itself.
- 2
From External Audit (Big Four Senior Manager/Director)
10-15 years in external audit, reaching Senior Manager or Director levelSkills to master
- Transitioning from external compliance mindset to internal value-add, adapting to internal politics, building internal relationships, understanding end-to-end business processes.
You're ready to move on when
- Managed large, complex audit engagements for financial services clients.
- Developed strong client relationships and presented to audit committees.
- Demonstrated ability to lead and develop large audit teams.
- Proven ability to understand and advise on internal control environments.
- 3
From Head of Risk & Compliance (Mid-Sized Firm)
5-8 years in a senior risk or compliance roleSkills to master
- Developing an independent audit perspective, applying audit methodologies, managing an audit team, transitioning from advisory to assurance.
You're ready to move on when
- Successfully built and managed risk management frameworks.
- Strong understanding of regulatory requirements and compliance programmes.
- Experience interacting with regulators and senior leadership.
- Demonstrated ability to identify and mitigate enterprise-level risks.