The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Operational Risk Analyst (L3) to Manager (L5)
Roughly 3-5 years as a Senior Analyst.Skills to master
- Moving from owning workstreams to owning the framework. You'd need to master stakeholder influence, team leadership, and strategic thinking. It's about seeing the bigger picture and enabling others.
You're ready to move on when
- Successfully led multiple complex incident investigations end-to-end.
- Consistently challenged business leaders effectively and driven significant control improvements.
- Informally mentored junior analysts and demonstrated leadership potential.
- Presented confidently to senior management (e.g., Operations Risk Committee).
- 2
Risk & Control Lead (from another department/industry)
Roughly 12-15 years of total experience, with 5+ in a lead capacity.Skills to master
- Adapting your risk framework knowledge to our specific operational context and regulatory environment. You'd need to quickly build credibility with our Operations teams and understand our unique pain points.
You're ready to move on when
- Managed a team of risk/control professionals in a similar complex, regulated environment.
- Successfully designed and implemented risk frameworks in previous roles.
- Proven ability to quickly learn new industry specifics and translate them into actionable risk strategies.
- Strong track record of influencing cross-functional leaders.
- 3
Operations Manager (with strong risk focus) to Manager (L5)
Roughly 10-14 years in Operations, with 3-5 years in a management role.Skills to master
- Formalising your inherent operational risk knowledge into a structured risk management framework. You'd need to develop expertise in GRC tools, KRI development, and regulatory compliance from a second-line perspective.
You're ready to move on when
- Demonstrated a strong personal interest and aptitude for risk management in your operational role.
- Successfully implemented significant process improvements that reduced operational risk.
- Understood and articulated operational risks from a 'first line' perspective.
- Showed a desire to move into a more dedicated risk oversight role.