The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Director of Health, Safety & Environment (HSE) in a large enterprise
5-10 years in this role before C-suite considerationSkills to master
- Enterprise-wide HSE strategy, Board-level reporting, crisis leadership, managing large multi-disciplinary teams, influencing at executive level, deep understanding of regulatory landscape.
You're ready to move on when
- Successfully led a major HSE transformation programme, achieving significant reductions in incident rates.
- Consistently delivered compelling Board reports on HSE performance and strategic risks.
- Proven ability to manage complex regulatory interactions and achieve favourable outcomes.
- Recognised as an industry leader in HSE, with a strong professional network.
- 2
Head of Legal & Compliance / General Counsel
5-10 years in this role before C-suite considerationSkills to master
- Deep legal and regulatory expertise, enterprise-wide compliance programme design, litigation management, corporate governance, ethical leadership, strategic legal counsel to the Board.
You're ready to move on when
- Successfully navigated complex legal and regulatory challenges without material penalties.
- Designed and implemented robust compliance frameworks across a large organisation.
- Demonstrated ability to provide pragmatic, commercially aware legal advice at the highest level.
- Strong track record of fostering an ethical culture and managing internal investigations.
- 3
Head of Enterprise Risk Management (ERM) / Chief Risk Officer (CRO) in a financial services firm
5-10 years in this role before C-suite consideration (cross-sector move)Skills to master
- Advanced ERM framework design, quantitative risk modelling, capital management, regulatory relations (e.g., FCA/PRA), strategic risk assessment, strong financial acumen.
You're ready to move on when
- Successfully implemented an advanced ERM framework across a complex financial institution.
- Demonstrated expertise in quantitative risk analysis and stress testing.
- Proven ability to manage regulatory relationships and respond to supervisory challenges.
- Strong understanding of the interplay between financial and operational risks.