The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Compliance Officer (L3)
3-5 years as an L3Skills to master
- Moving from owning workstreams to architecting entire programmes, leading small teams, and providing definitive regulatory advice. You'll need to develop stronger strategic thinking and cross-functional influence.
You're ready to move on when
- Consistently taking on the most complex projects and investigations within your team.
- Informally mentoring junior colleagues and being the 'go-to' person for tricky questions.
- Demonstrating the ability to influence senior stakeholders and drive compliance outcomes without direct authority.
- Proactively identifying emerging risks and proposing strategic solutions, not just reacting to them.
- 2
From Legal Practice (e.g., Regulatory Lawyer)
8-10 years post-qualification experience (PQE)Skills to master
- Transitioning from pure legal advice to practical compliance programme design and implementation. You'll need to understand operational realities, risk frameworks, and how to embed controls within a business context, not just advise on the law.
You're ready to move on when
- Experience advising clients on regulatory compliance matters, not just litigation.
- A genuine interest in moving from an advisory role to an in-house role with direct responsibility for programme management.
- Strong project management skills and an understanding of business operations.
- Ability to translate complex legal opinions into actionable business requirements.
- 3
From Risk Management (with Compliance Focus)
5-8 years in a senior risk roleSkills to master
- Deepening your understanding of specific regulatory texts and their legal implications, moving beyond general risk frameworks to detailed compliance obligations. You'll need to become an expert in specific regulatory domains.
You're ready to move on when
- Proven experience in developing and implementing risk frameworks with a strong compliance component.
- A desire to specialise more deeply in regulatory requirements rather than broader enterprise risk.
- Strong analytical skills and an ability to interpret complex data for compliance insights.
- Experience working closely with legal teams on regulatory matters.