The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Information Compliance Analyst (L3)
2-3 years at L3Skills to master
- Leading DPIAs, writing new policies, mentoring juniors, and managing specific compliance projects end-to-end. You need to show you can own a workstream.
You're ready to move on when
- Consistently delivering complex compliance projects on time and with high quality.
- Being the go-to person for specific regulatory questions within your team.
- Successfully mentoring 1-2 junior analysts, helping them develop their skills.
- Proactively identifying and proposing solutions for compliance gaps, not just reacting to them.
- 2
Legal Operations Specialist (with Compliance Focus)
3-5 years in Legal OpsSkills to master
- Understanding legal processes, contract management, eDiscovery workflows, and how legal requirements translate into operational controls.
You're ready to move on when
- Demonstrated ability to manage complex eDiscovery cases or legal holds.
- Strong understanding of legal and regulatory requirements impacting information management.
- Experience working closely with IT and business teams to implement legal controls.
- A proactive approach to identifying and mitigating legal risks related to information.
- 3
Senior Data Governance Analyst
3-4 years in Data GovernanceSkills to master
- Data classification, data lineage mapping, data quality management, and implementing data policies across various data domains.
You're ready to move on when
- Proven ability to define and implement data governance policies and standards.
- Expertise in data cataloguing tools (e.g., Collibra) and data stewardship practices.
- Strong understanding of how data quality and governance impact compliance.
- Experience collaborating with data owners and business units to improve data practices.