The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Audit Administrator (L3)
Roughly 3-5 years as a Senior Audit Administrator.Skills to master
- You'd have mastered process improvement for individual audits, become proficient in GRC platform configuration, and started informally mentoring junior staff. You'd also be comfortable handling complex or sensitive audit documentation.
You're ready to move on when
- Consistently identifying and implementing process efficiencies without direct oversight.
- Being the go-to person for GRC platform queries within your workstream.
- Successfully onboarding and guiding new team members.
- Taking ownership of administrative outcomes for entire, complex audit workstreams.
- 2
From GRC System Specialist / Analyst
Around 5-8 years in a dedicated GRC system role, perhaps in IT or Risk.Skills to master
- Deep technical expertise in GRC platform administration, workflow design, and reporting. You'd need to quickly pick up the specific nuances of internal audit methodologies and stakeholder management.
You're ready to move on when
- Proven track record of configuring and optimising GRC platforms for various use cases.
- Strong understanding of data models and reporting within GRC systems.
- Demonstrable ability to translate business requirements into system configurations.
- A keen interest in applying technical GRC skills specifically to an audit context.
- 3
From Project Manager (with Finance/Audit focus)
Roughly 6-10 years in project management, ideally within finance, compliance, or a heavily regulated industry.Skills to master
- Excellent project planning, stakeholder coordination, and team leadership skills. You'd need to rapidly acquire specific knowledge of audit processes, GRC platforms, and regulatory requirements.
You're ready to move on when
- Successfully managed complex, multi-stakeholder projects to completion.
- Experience in process re-engineering or operational efficiency initiatives.
- Strong ability to manage budgets, timelines, and resources.
- A clear desire to apply project management skills to the operational side of internal audit.