The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Risk & Compliance Analyst (L1)
2-3 yearsSkills to master
- Mastering control testing methodologies, accurate documentation, basic regulatory research, and effective use of GRC platforms. You'd be expected to show initiative and reliability.
You're ready to move on when
- Consistently delivering high-quality work with minimal supervision.
- Proactively identifying minor issues and suggesting solutions.
- Demonstrating a strong understanding of core compliance principles.
- Taking ownership of assigned tasks and seeing them through.
- 2
Internal Audit Associate
2-4 yearsSkills to master
- Developing strong analytical skills, understanding control design and operating effectiveness, and experience in drafting audit findings. This path gives you a great 'challenge' mindset.
You're ready to move on when
- Successfully leading smaller audit engagements or sections of larger ones.
- Producing well-evidenced audit findings and practical recommendations.
- Demonstrating a good understanding of business processes and inherent risks.
- 3
Operations Specialist with Compliance Focus
3-5 yearsSkills to master
- Deep knowledge of specific operational processes, understanding of embedded controls, and experience in managing operational risks. You'd be coming with a strong 'first line' perspective.
You're ready to move on when
- Successfully managing operational risks within your area.
- Proactively suggesting process improvements to strengthen controls.
- Having a clear understanding of the regulatory requirements impacting your operations.