The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
From Operational Risk Lead/Manager (L4)
3-5 yearsSkills to master
- Strategic programme management, advanced stakeholder influence (especially at executive level), team leadership of other managers, and a broader understanding of divisional P&L and business strategy.
You're ready to move on when
- Successfully led multiple complex risk programmes with significant business impact.
- Consistently received strong feedback on leadership and team development.
- Demonstrated ability to influence senior business leaders without direct authority.
- Proven track record of managing and mentoring a team of risk specialists/leads.
- 2
From Senior Internal Audit Manager (Operations Focus)
4-6 yearsSkills to master
- Shifting from assurance to active risk management and mitigation. Developing a proactive, rather than reactive, approach to risk. Building and leading a 'second line' team. Deepening understanding of risk appetite setting and KRI development.
You're ready to move on when
- Led complex operational audits with a focus on control effectiveness and risk identification.
- Demonstrated strong understanding of operational processes and their inherent risks.
- Proven ability to recommend practical, implementable control improvements.
- Strong communication and influencing skills with operational management.
- 3
From Senior Operational Leadership (with strong Risk Focus)
5-7 yearsSkills to master
- Formalising risk management frameworks, understanding regulatory expectations for risk, developing risk reporting for executive and board levels, and leading a dedicated risk function.
You're ready to move on when
- Managed large operational teams with direct accountability for risk and compliance.
- Implemented significant process improvements that reduced operational incidents.
- Demonstrated a strong, inherent 'risk mindset' in daily decision-making.
- Proven ability to lead and motivate a diverse team.