The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Operational Risk Analyst
3-5 years as a Senior AnalystSkills to master
- Leading complex projects, mentoring junior colleagues, presenting to senior stakeholders, taking ownership of a significant workstream.
You're ready to move on when
- Consistently exceeding expectations in your Senior Analyst role.
- Proactively identifying and driving improvements to risk processes.
- Demonstrating strong leadership potential and a desire to manage people.
- Successfully influencing senior business managers on risk matters.
- 2
From Lead Operational Risk Analyst / Op Risk Specialist
2-4 years as a Lead Analyst/SpecialistSkills to master
- Acting as a subject matter expert, designing components of the risk framework, managing large-scale projects, informal team leadership.
You're ready to move on when
- Being the go-to expert for a specific area of operational risk (e.g., technology risk, conduct risk).
- Successfully architecting and implementing new risk processes or tools.
- Proven ability to manage multiple complex initiatives simultaneously.
- Demonstrating a strategic mindset beyond your immediate area of expertise.
- 3
From Internal Audit or Compliance (with Op Risk focus)
5-8 years in a relevant audit/compliance roleSkills to master
- Deep understanding of control testing, regulatory requirements, risk governance, and strong analytical skills. You'll need to demonstrate a shift from assurance to active risk management.
You're ready to move on when
- Extensive experience auditing operational risk processes and controls.
- Strong grasp of 3LOD model and regulatory expectations.
- Ability to translate audit findings into proactive risk mitigation strategies.
- Demonstrated interest and passion for operational risk management, not just compliance.