The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Lead IG Specialist / IG Architect (L4)
Roughly 4-8 years at the Lead levelSkills to master
- Moving from designing solutions to owning the entire programme. You'll need to develop strong team leadership, budget management, and C-suite influencing skills. It's less about the 'how' and more about the 'why' and 'what next'.
You're ready to move on when
- Successfully led multiple complex, cross-functional governance projects from inception to completion.
- Consistently demonstrated the ability to mentor and develop junior team members.
- Developed and presented strategic recommendations to senior leadership with positive outcomes.
- Managed project budgets of £50K-£500K with strong fiscal responsibility.
- 2
From Information Governance Manager (L5) at a smaller company
Roughly 3-6 years in a Manager roleSkills to master
- Scaling your existing management experience to a larger, more complex enterprise. This means dealing with bigger budgets, more diverse stakeholders, and a broader regulatory footprint. You'll need to demonstrate the ability to operate at a Board level.
You're ready to move on when
- Successfully owned and managed an entire IG programme, including budget and team, in a smaller organisation.
- Proven ability to navigate complex regulatory environments and manage significant information risks.
- Experience presenting to executive leadership and/or Board committees.
- Demonstrated capability to build and scale governance functions.
- 3
From Senior Legal Counsel (focused on data/compliance)
Roughly 5-10 years as Senior CounselSkills to master
- Transitioning from purely legal advice to operationalising governance programmes. You'll need to build strong programme management skills, team leadership, and a deeper understanding of the technical aspects of information management systems. It's about moving from 'what the law says' to 'how we make the business comply'.
You're ready to move on when
- Extensive experience advising on data protection, eDiscovery, and records management laws.
- Proven ability to translate legal requirements into practical business processes.
- Demonstrated leadership in managing legal aspects of compliance programmes.
- A strong interest and aptitude for technology and operational management.