The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Senior Operational Risk Analyst (Internal Promotion)
3-5 years as a Senior AnalystSkills to master
- Leading end-to-end workstreams, facilitating complex RCSA workshops, mentoring junior colleagues, and demonstrating strong influencing skills with mid-level managers. You'd have proven you can operate independently and drive significant outcomes.
You're ready to move on when
- Consistently delivering high-quality risk assessments and control designs for complex processes.
- Successfully leading multiple Root Cause Analysis investigations to completion.
- Receiving strong feedback from business unit leaders on your ability to influence and collaborate.
- Actively mentoring 1-2 junior analysts and taking initiative on team development.
- 2
Operations Manager (with Risk Focus)
5-8 years in a hands-on operational management role, with significant exposure to risk.Skills to master
- A deep, practical understanding of operational processes and their inherent risks, experience in managing operational teams, and a proven ability to implement process improvements that also reduce risk. You'd be bringing the 'first line' perspective.
You're ready to move on when
- Successfully managing an operational team of 10+ people for several years.
- Implementing significant process changes that resulted in measurable improvements in efficiency or quality.
- Demonstrating a proactive approach to identifying and mitigating risks within your operational area.
- Having a strong understanding of control design from a practical, day-to-day perspective.
- 3
Internal Audit Manager (Operational Audit)
3-6 years as an Internal Audit Manager, specialising in operations.Skills to master
- A strong grasp of control effectiveness testing, audit methodology, and the ability to critically assess operational processes. You'd be bringing a 'third line' challenge perspective, now applying it to build proactive programmes.
You're ready to move on when
- Leading complex operational audits and delivering impactful findings to senior management.
- Demonstrating excellent analytical skills in identifying control weaknesses and recommending practical solutions.
- Having a strong reputation for independence, objectivity, and clear communication in audit reports.
- A desire to move from assurance to actively building and managing risk programmes.