The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Operational Resilience Specialist (L2)
2-3 yearsSkills to master
- Independent BIA execution, drafting recovery plans, facilitating simple tabletop exercises, strong grasp of RTO/RPO.
You're ready to move on when
- Consistently delivers high-quality BIAs without significant oversight.
- Successfully facilitates departmental exercises, generating actionable findings.
- Proactively identifies and proposes solutions for minor resilience gaps.
- Demonstrates strong understanding of regulatory requirements for resilience.
- 2
Risk Analyst (Operational Risk focus)
3-5 yearsSkills to master
- Risk identification and assessment methodologies, control effectiveness evaluation, understanding of operational loss events, strong analytical skills.
You're ready to move on when
- Proven ability to conduct thorough risk assessments and identify root causes.
- Experience in developing and implementing risk mitigation strategies.
- Strong understanding of the business's operational processes and control environment.
- A clear interest in moving from identifying risk to actively building resilience.
- 3
IT Disaster Recovery Specialist
3-5 yearsSkills to master
- Technical recovery procedures, infrastructure dependencies, testing DR plans, understanding of cloud resilience architectures.
You're ready to move on when
- Successfully manages and tests technical recovery plans for critical systems.
- Deep understanding of IT infrastructure and its resilience capabilities.
- Ability to translate technical recovery into business impact.
- Desire to broaden scope beyond IT to encompass full business operational resilience.