The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Compliance Analyst / Specialist (L3)
3-5 yearsSkills to master
- Deep expertise in a specific compliance domain (e.g., AML, GDPR), proven ability to improve existing processes, and informal mentorship of junior team members.
You're ready to move on when
- Consistently delivers complex compliance tasks independently with minimal supervision.
- Has successfully led small-to-medium scale process improvement initiatives.
- Receives positive feedback on their ability to guide and support less experienced colleagues.
- Can articulate the 'why' behind compliance requirements and their business impact.
- 2
Legal Counsel (In-house or Private Practice)
4-7 yearsSkills to master
- Strong legal research and interpretation skills, experience advising clients on regulatory matters, and drafting legal opinions or contracts.
You're ready to move on when
- Has a deep understanding of relevant legal frameworks and their practical application.
- Can clearly communicate complex legal advice to non-legal audiences.
- Demonstrates commercial awareness and an ability to balance legal risk with business objectives.
- Is comfortable with direct client/stakeholder engagement and managing expectations.
- 3
Risk Management Specialist
5-8 yearsSkills to master
- Experience in enterprise risk management (ERM) frameworks, quantitative risk assessment, and designing risk mitigation strategies.
You're ready to move on when
- Proficient in identifying, assessing, and monitoring various types of organisational risks.
- Can develop and implement risk management policies and procedures.
- Understands the interplay between different risk categories (e.g., operational, financial, compliance).
- Has experience presenting risk assessments to senior management.