The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Head of Emergency Operations / Head of Business Continuity (Level 005)
3-5 years in a Level 005 role.Skills to master
- Mastering functional leadership, managing a significant department budget, presenting to senior leadership, and driving large-scale programmes. You'll need to demonstrate the ability to translate tactical excellence into strategic impact.
You're ready to move on when
- Successfully led the response to multiple significant incidents, demonstrating calm and decisive leadership.
- Consistently delivered on departmental KPIs and strategic objectives.
- Built and developed a high-performing team of managers and specialists.
- Proactively identified and mitigated significant risks to the business unit.
- Received strong positive feedback from C-suite on briefings and strategic input.
- 2
Senior Manager / Director in Resilience Consulting
5-8 years in a senior consulting role.Skills to master
- Developing broad industry knowledge, managing complex client engagements, building strategic resilience frameworks for diverse organisations, and demonstrating strong client relationship management at an executive level. You'll need to show you can transition from advising to owning the outcomes.
You're ready to move on when
- Led successful resilience transformation projects for multiple large enterprise clients.
- Consistently exceeded client expectations and generated new business.
- Developed thought leadership and presented at industry conferences.
- Managed large consulting teams and complex project budgets.
- Demonstrated ability to influence C-suite clients on strategic resilience decisions.
- 3
Head of Enterprise Risk Management (ERM)
3-5 years in an ERM leadership role.Skills to master
- A deep, holistic understanding of all enterprise risks (financial, operational, strategic, reputational), integrating resilience into the broader risk framework, and reporting to the Board on aggregate risk exposure. This path requires a strong grasp of quantitative risk analysis and governance.
You're ready to move on when
- Successfully implemented or significantly enhanced an ERM framework for a large organisation.
- Consistently provided insightful, actionable risk intelligence to the C-suite and Board.
- Demonstrated ability to drive risk culture change across an enterprise.
- Managed cross-functional teams responsible for risk identification and mitigation.
- Proven track record of influencing strategic decisions based on risk insights.