The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Senior Operations Risk Analyst (Internal)
3-5 years as a Senior AnalystSkills to master
- Leading RCSA workshops, independently conducting complex RCAs, mentoring junior team members, and becoming the go-to expert for a specific risk domain (e.g., supply chain, IT operations). You've mastered the 'doing' and are ready for the 'designing'.
You're ready to move on when
- Consistently delivers high-quality risk assessments and mitigation plans without significant oversight.
- Proactively identifies and escalates emerging risks, often with proposed solutions.
- Is sought out by junior colleagues for advice and guidance.
- Has successfully led at least two significant risk mitigation projects from start to finish.
- 2
From Risk Consultant (External)
6-10 years in risk consulting, with a focus on operational riskSkills to master
- Translating theoretical risk frameworks into practical, implementable solutions within a single organisation. Adapting to an internal, long-term perspective rather than project-based engagements. Building deep internal relationships and navigating organisational politics.
You're ready to move on when
- Experience leading operational risk engagements for multiple clients, demonstrating a breadth of industry knowledge.
- Proven ability to design and implement risk frameworks, not just advise on them.
- Strong client management and influencing skills, adaptable to internal stakeholder management.
- A desire to 'own' the outcomes rather than just delivering recommendations.
- 3
From Senior Operations Manager (Internal/External)
8-12 years in a hands-on operational leadership roleSkills to master
- Formalising your inherent understanding of operational risk into structured methodologies. Learning GRC tools and risk quantification techniques. Shifting from managing operations to specifically managing the *risks* within operations, often requiring a more analytical and less 'firefighting' mindset.
You're ready to move on when
- Deep, practical understanding of complex operational processes and their failure points.
- A track record of improving operational efficiency and reducing errors in previous roles.
- A natural 'skeptical investigator' mindset, always looking for potential issues.
- A strong desire to move into a dedicated risk role, bringing your operational expertise to bear.