The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Legal Risk Analyst (Internal Promotion)
3-5 years as a Senior AnalystSkills to master
- Leading internal investigations, developing and delivering compliance training, independently managing significant workstreams, and mentoring junior colleagues. You'll need to show you can handle complexity and take ownership.
You're ready to move on when
- Consistently delivering high-quality work on complex legal risk projects with minimal supervision.
- Proactively identifying systemic risks and proposing solutions, not just reacting to issues.
- Successfully mentoring 1-2 junior analysts and receiving positive feedback on your guidance.
- Demonstrating strong influencing skills with mid-level stakeholders across different departments.
- 2
In-house Legal Counsel (with Risk Focus)
8-10 years post-qualification, with 3-5 years focused on risk/complianceSkills to master
- Deep understanding of commercial law, contract negotiation, and litigation management. You'll need to transition from a purely advisory role to a more programme-oriented, proactive risk management mindset.
You're ready to move on when
- Strong track record of advising on complex commercial agreements and identifying legal risks within them.
- Experience managing external counsel and overseeing litigation processes.
- A clear interest and demonstrable experience in proactive risk identification and mitigation, beyond just reactive legal advice.
- Ability to translate legal principles into practical business controls and processes.
- 3
Risk & Compliance Consultant (Big 4 / Specialist Firm)
8-12 years in consulting, leading client engagementsSkills to master
- Client relationship management, project delivery, and a broad exposure to different industry regulatory environments. You'll need to adapt to an in-house culture and focus on one organisation's specific risk profile.
You're ready to move on when
- Successfully led multiple client engagements focused on legal risk, regulatory compliance, or GRC system implementation.
- Experience designing risk frameworks and policies for diverse organisations.
- Strong project management skills and the ability to drive complex initiatives to completion.
- A desire to move from an advisory role to an embedded, hands-on leadership position within a single company.