The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Manager, Operational Risk
3-5 years as a Senior ManagerSkills to master
- At this level, you'll need to have mastered leading large risk programmes, managing a team of managers, and presenting complex risk issues to business unit heads. You'll have owned the risk profile for a major division and started building relationships with internal audit and some external stakeholders.
You're ready to move on when
- Successfully led a major, cross-functional risk mitigation programme from inception to completion.
- Consistently received 'outstanding' feedback on leadership and team development.
- Proactively identified and addressed a significant emerging risk that could have impacted the business.
- Demonstrated ability to influence decisions at the business unit leadership level without direct authority.
- 2
From Head of Risk (Specific Domain)
4-6 years as a Head of Risk for a specific domain (e.g., Head of IT Risk, Head of Supply Chain Risk)Skills to master
- You'll need deep expertise in a critical operational risk domain, having built and led a function within that area. The challenge here is broadening that deep specialisation into a holistic, enterprise-wide operational risk view. You'll need to demonstrate the ability to think beyond your specific silo.
You're ready to move on when
- Built a 'best-in-class' risk management function within your specialised domain.
- Successfully navigated complex regulatory audits specific to your domain.
- Demonstrated the ability to translate technical risk issues into business language for senior leaders.
- Initiated and led cross-functional projects that required collaboration beyond your immediate domain.
- 3
From Senior Consultant (Operational Risk, Big Four)
5-7 years as a Senior Manager/Director at a major consulting firm, specialising in operational risk.Skills to master
- You'll bring a wealth of experience in diverse operational risk frameworks and industries. The key here is transitioning from advising clients to owning and being accountable for the risk outcomes within a single organisation. You'll need to prove you can build and lead an internal team, not just manage projects.
You're ready to move on when
- Successfully led multiple large-scale operational risk transformation projects for diverse clients.
- Developed and maintained strong client relationships at the executive level.
- Demonstrated the ability to build and mentor high-performing consulting teams.
- Proven ability to translate theoretical frameworks into practical, implementable solutions.