The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Director, Enterprise Risk Management
3-5 years as a DirectorSkills to master
- Deepen understanding of specific business unit products and operations, refine executive communication for a business unit CEO, and demonstrate ability to manage a broader range of risk types.
You're ready to move on when
- Successfully led a major enterprise-wide risk programme (e.g., new ERM framework implementation).
- Consistently received positive feedback on influencing senior stakeholders and driving cross-functional initiatives.
- Demonstrated ability to manage a team of other Directors or senior managers.
- 2
From Director, Specific Risk Domain (e.g., Credit Risk, Operational Risk for a large division)
4-6 years as a specialist DirectorSkills to master
- Broaden expertise beyond a single risk type, develop a holistic view of financial and non-financial risks, and gain experience in regulatory relationship management at a broader level.
You're ready to move on when
- Successfully managed a significant risk portfolio within a specific domain, with strong performance against risk appetite.
- Demonstrated ability to build and lead a large, expert team in their specialisation.
- Proven track record of navigating complex risk issues and providing clear recommendations to business leaders.
- 3
From Senior Regulatory Affairs / Compliance Lead (with strong risk background)
5-7 years in senior regulatory/compliance rolesSkills to master
- Develop deeper expertise in quantitative risk modelling, capital management, and the practical application of risk appetite frameworks within a commercial context.
You're ready to move on when
- Successfully managed high-stakes regulatory examinations and remediation programmes.
- Demonstrated ability to translate complex regulatory requirements into practical business actions.
- Strong relationships with key regulators and a reputation for credible engagement.