The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Operational Risk Analyst (Internal Promotion)
3-5 years as a Senior AnalystSkills to master
- Mastering end-to-end RCSA cycles, leading complex deep-dives, consistently delivering high-quality risk reports, and beginning to mentor junior colleagues.
You're ready to move on when
- Consistently exceeds expectations in managing complex risk reviews.
- Proactively identifies and proposes solutions for systemic risk issues.
- Successfully mentors 1-2 junior analysts, leading to their improved performance.
- Demonstrates strong influencing skills with business stakeholders.
- 2
Operational Risk Consultant (External Hire)
8-12 years in consulting, specialising in financial services riskSkills to master
- Client relationship management, project delivery in complex environments, deep knowledge of various risk frameworks, and strong presentation skills.
You're ready to move on when
- Successfully managed multiple risk transformation projects for financial institutions.
- Proven ability to adapt risk frameworks to diverse client needs.
- Strong track record of delivering actionable recommendations and driving change.
- Excellent stakeholder management skills, often with C-suite clients.
- 3
Internal Audit Specialist (Lateral Move)
8-12 years in internal audit, with a focus on operational auditsSkills to master
- Deep understanding of control testing, audit methodologies, regulatory expectations, and strong analytical skills to identify control weaknesses.
You're ready to move on when
- Led complex operational audits with significant findings and recommendations.
- Demonstrated ability to challenge management effectively on control deficiencies.
- Strong understanding of the business processes and underlying risks.
- Experience in drafting and presenting audit reports to senior stakeholders.