The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Operational Risk Specialist (Internal Promotion)
3-5 years as a Senior SpecialistSkills to master
- Deep expertise in a specific operational domain's risks, leading complex risk assessments, mentoring junior team members, and presenting to mid-level management.
You're ready to move on when
- Consistently delivers high-quality risk assessments and control designs with minimal oversight.
- Proactively identifies emerging risks and proposes solutions.
- Demonstrates strong leadership potential through informal mentoring and project leadership.
- Receives excellent feedback from Operations stakeholders on collaboration and influence.
- 2
Internal Audit Manager (External Hire)
Coming from 5-8 years as an Internal Audit ManagerSkills to master
- Strong grasp of control testing methodologies, audit report writing, and stakeholder management in an assurance context. You'll need to shift from 'finding problems' to 'owning solutions'.
You're ready to move on when
- Proven experience managing audit engagements and teams.
- Ability to translate audit findings into practical, implementable control improvements.
- Strong understanding of operational processes and inherent risks.
- A desire to move from an assurance role to a 'second line' risk ownership role.
- 3
Operations Manager (Internal Transfer)
Coming from 8-10 years managing a complex operational functionSkills to master
- A deep, practical understanding of operational processes, challenges, and priorities. You'll need to formalise your risk knowledge and learn the specific methodologies of risk control.
You're ready to move on when
- Demonstrated ability to manage complex teams and processes.
- A clear interest and aptitude for identifying and mitigating operational risks.
- Strong leadership skills and ability to influence peers.
- A willingness to learn and apply formal risk management frameworks.