The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Associate Risk Control Analyst (L1)
1-2 yearsSkills to master
- Mastering basic control testing, precise documentation, understanding the COSO framework, and learning our internal systems and processes.
You're ready to move on when
- Consistently completing assigned tests accurately and on time.
- Producing clean, well-supported test workpapers with minimal rework.
- Proactively identifying minor issues and escalating them appropriately.
- Demonstrating a solid grasp of our core control environment.
- 2
Internal Audit Junior/Associate
2-3 yearsSkills to master
- Understanding audit methodologies, evidence gathering, report writing, and engaging with business stakeholders. The audit lens is very similar to risk control.
You're ready to move on when
- Successfully completing audit engagements with positive feedback.
- Strong analytical skills in identifying control weaknesses.
- Ability to articulate findings clearly and diplomatically.
- A desire to move from assurance (audit) to active risk management (control).
- 3
Junior Compliance Officer
2-4 yearsSkills to master
- Interpreting regulatory requirements, understanding compliance frameworks, and monitoring adherence to policies. This background gives you a strong regulatory perspective.
You're ready to move on when
- Proven ability to understand and apply complex regulations.
- Experience in monitoring and reporting on compliance risks.
- A keen eye for detail and identifying non-compliance.
- A desire to apply compliance knowledge more directly to control design and testing.