The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Governance Specialist (L2)
2-3 years as an L2Skills to master
- Taking ownership of specific control areas, conducting routine audits independently, supporting remediation efforts, and managing minor compliance tasks. You'll need to show you can handle more complexity and work with less direct supervision.
You're ready to move on when
- Consistently exceeding expectations in managing your assigned control areas.
- Proactively identifying process improvements or control enhancements.
- Demonstrating strong problem-solving skills for non-routine issues.
- Successfully guiding new joiners or less experienced colleagues informally.
- 2
From Internal Audit or Risk Analyst
3-5 years in a similar roleSkills to master
- A deep understanding of audit methodologies, risk assessment techniques, and control testing. You'll need to translate that audit lens into a proactive governance and control *design* mindset, rather than just retrospective review.
You're ready to move on when
- Strong track record of identifying control weaknesses and recommending practical solutions.
- Experience in drafting audit reports and communicating findings to management.
- A clear understanding of how operational processes work, not just how they're audited.
- An interest in moving from identifying problems to actively building solutions.
- 3
From a Compliance Officer Role
3-5 years in a compliance-focused roleSkills to master
- Expertise in specific regulatory domains and the ability to interpret complex legal texts. You'll need to develop a stronger understanding of operational processes and how to embed compliance requirements directly into workflows, rather than just advising on them.
You're ready to move on when
- Proven ability to interpret and apply complex regulations to business operations.
- Experience in developing compliance policies and procedures.
- A desire to work more hands-on with process design and control implementation.
- Strong communication skills for translating legal requirements into practical guidance.