The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director, Audit & GRC Strategy (Large Financial Institution)
3-5 years in previous roleSkills to master
- Enterprise GRC architecture, strategic vendor management, board-level reporting, leading multi-functional programmes.
You're ready to move on when
- Successfully led a major GRC platform implementation or upgrade for a business unit.
- Consistently presented to the Audit Committee or Executive Risk Committee.
- Managed a team of 10+ professionals and developed future leaders.
- Demonstrated ability to influence senior stakeholders outside of direct reporting lines.
- 2
Head of Operations / Chief Operating Officer (Mid-size Financial Services Firm)
5-7 years in previous roleSkills to master
- Holistic operational oversight, P&L management, strategic planning across multiple business functions, managing external relationships (regulators, partners).
You're ready to move on when
- Owned a significant operational P&L and consistently met financial targets.
- Successfully driven large-scale operational efficiency programmes.
- Managed diverse operational teams (e.g., back-office, compliance, risk).
- Proven ability to set strategic direction and execute complex initiatives.
- 3
Senior Partner / Principal (Management Consulting - Financial Services)
7-10 years in previous roleSkills to master
- Client relationship management at C-suite level, strategic advisory on risk and compliance transformation, business development, leading large engagement teams.
You're ready to move on when
- Consistently advised multiple financial services clients on GRC strategy and operational improvement.
- Developed and sold significant consulting engagements (£1M+).
- Built and led high-performing consulting teams.
- Demonstrated thought leadership in the financial services risk and compliance space.