ESG and Sustainability Reporting: A Compliance Career Path

A mid-size manufacturer is preparing its first sustainability statement under the EU's Corporate Sustainability Reporting Directive. The numbers for its own facilities are solid: metered electricity, tracked fuel use, a waste contractor that provides tonnage reports. The problem is Scope 3 — the emissions embedded in everything the company buys and everything customers do with what it sells. The team's first estimate is built on industry-average factors applied to spend data, and the external assurance provider immediately asks the question that decides whether the number survives: what is the evidence that this estimate is reasonable, and can you show your work? That question, repeated across hundreds of data points instead of one, is what a sustainability reporting career now consists of. It looks much less like writing a corporate responsibility brochure and much more like running a financial close.

What changed, and why the jobs exist now

For most of the last two decades, sustainability reporting was voluntary, self-selected, and largely unaudited. Companies chose their own frameworks — the Global Reporting Initiative (GRI), CDP questionnaires, the Sustainability Accounting Standards Board (SASB) — and disclosed what made them look good. That has been changing jurisdiction by jurisdiction.

The EU's CSRD, applying the European Sustainability Reporting Standards (ESRS), pushed large companies toward mandatory, structured, externally assured disclosure, starting with the largest public-interest entities reporting on FY2024. The scope and timeline shrank in 2025 when the EU's "Omnibus" simplification package delayed reporting for later waves of companies and narrowed the number of data points required, a reminder that this regulatory area is still being actively renegotiated rather than settled. In parallel, the International Sustainability Standards Board (ISSB) issued IFRS S1 and S2, and individual jurisdictions — the UK, Japan through its own Sustainability Standards Board, Australia, Canada, and others — are adopting ISSB-aligned requirements on their own timelines. In the US, the SEC's 2024 climate disclosure rule was stayed by litigation and the agency later stepped back from defending it, while California's SB 253 and SB 261 press ahead independently, requiring large companies doing business in the state to disclose greenhouse gas emissions and climate-related financial risk regardless of what happens federally.

The practical effect for a hiring manager is the same across all of these regimes: sustainability data now has to survive the kind of scrutiny that used to be reserved for financial statements. That requires people who understand controls, evidence, and assurance — not just people who understand sustainability.

What the work actually involves

The center of the job is the double materiality assessment: systematically determining which sustainability topics are financially material to the company and which represent the company's material impact on people and the environment, then documenting the process well enough that an auditor or regulator can follow the logic. From there, the work branches into several recurring tasks.

• **Data collection across functions that do not normally talk to compliance.** Emissions data comes from facilities and fleet management. Workforce data comes from HR. Supply chain data comes from procurement. A reporting analyst spends much of the year building and maintaining the pipes between these functions and the report, the same coordination work an internal auditor does when mapping a process across departments.
• **Control design over non-financial data.** Financial numbers have decades of control discipline behind them; sustainability numbers usually do not. Someone has to design and document the controls — who approves an emissions factor, how a data correction gets tracked, what evidence supports an estimate — often from close to nothing.
• **Assurance readiness.** Most regimes now require limited assurance from an external provider, with a path toward reasonable assurance (the audit-grade standard) over time. Preparing for that means building an evidence trail in advance rather than scrambling to reconstruct one when the assurance provider asks for it.
• **Target and metric governance.** Companies that have made public commitments — net zero by a stated year, specific diversity targets, supplier codes of conduct — need someone tracking progress against those commitments with the same rigor as a financial forecast, because a missed or restated ESG target now carries real reputational and, increasingly, legal exposure.
• **Board and committee reporting.** Sustainability committees, risk committees, and in some companies the full board now expect regular, decision-useful reporting rather than an annual glossy report, which means translating raw data into a narrative a director can challenge.

Where these roles actually sit

There is no settled organizational home for this work yet, and that is worth knowing before you take a role. In some companies it sits inside a dedicated sustainability or ESG team that reports to a Chief Sustainability Officer. In others it has been absorbed into finance or controllership, on the logic that assured disclosure belongs next to the people who already run the financial close. In still others it sits inside legal, risk, or internal audit, particularly where the driving concern is regulatory exposure rather than stakeholder communication. A "sustainability controller" or "ESG reporting manager" title increasingly signals the finance-adjacent version of the job; "sustainability manager" alone can still mean anything from strategy to reporting to pure communications, so it is worth asking directly what fraction of the role is disclosure and assurance versus programs and messaging.

The skills that separate a credible practitioner from a report-writer

The field is still absorbing a wave of people whose background is communications or corporate responsibility rather than data and controls, and hiring managers who have been burned by an unassured, unreliable first report are now screening hard for a different profile.

• Comfort with control design and evidence — the instinct to ask "how do we know this number is right" before publishing it, not after an assurance provider asks.
• Enough data literacy to sanity-check an estimate, spot a unit error, and understand where an emissions factor or an activity-data source actually comes from.
• The ability to hold a materiality judgment under pressure from a business unit that wants a topic left out, or a communications team that wants a target added, without technical support.
• Working knowledge of at least one reporting framework in real depth — most people are shallow across three or four and cannot actually apply any of them under scrutiny.
• Enough project management skill to run an annual reporting cycle with dozens of contributing functions and a fixed external deadline, which is a very different skill from writing sustainability strategy.

How people actually get into it

The most durable entry paths run through disciplines that already carry an evidence and controls mindset. Financial reporting, SOX, and internal audit professionals move in because building and testing controls over new data is close to work they already know, and companies actively want that DNA now that assurance is mandatory. Environmental, health, and safety (EHS) professionals move in from the environmental side, bringing technical fluency in emissions measurement that most finance-trained hires lack. Sustainability and CSR professionals with several years of program experience move in from the communications and strategy side, though they often need to deliberately build control and data skills to be credible in an assurance-driven role. A newer path is coming from ESG data and technology vendors, where analysts who have spent time inside reporting software understand the mechanics of data lineage that a first-time preparer usually does not.

The realistic entry point for someone outside the field is usually a sustainability reporting analyst or ESG data analyst role focused on one part of the disclosure — collecting a single data category, maintaining a metrics tracker, or supporting one framework's mapping — rather than owning the full disclosure from day one.

Certifications worth having

No single credential dominates the way CPA does in accounting, which reflects how young this regulatory landscape still is. GARP's Sustainability and Climate Risk (SCR) certificate is the closest thing to a recognized standard for the risk and controls side of the work. GRI runs a certified training and professional certification program built around its own standards. CFA Institute's Certificate in ESG Investing is common among people coming from the investment side rather than corporate reporting. IEMA offers environmental management credentials that carry weight for practitioners with an EHS background. None of these substitute for having actually run a materiality assessment or sat across the table from an assurance provider defending a number — hiring managers in this space tend to ask for a specific example of a data point that got challenged and how it was resolved, not a list of exam passes.

Where the career goes

An analyst who is reliable at data collection and control documentation typically moves toward owning a full framework — CSRD, ISSB-aligned disclosure, or a state-level regime — within two to three years, including the direct relationship with the external assurance provider. From there the path splits. Some move toward sustainability controller or head of ESG reporting roles, effectively running a second close process alongside the financial one. Others move into ESG assurance itself, joining the audit and advisory firms now building out practices to serve this demand, which trades in-house context for breadth across clients and frameworks. A smaller group moves toward strategy and Chief Sustainability Officer tracks, though that path increasingly runs through reporting credibility rather than around it, because a sustainability leader who cannot defend their own numbers has a short shelf life with an audit committee.

The discipline's near-term appeal is also its instability: the frameworks, thresholds, and even which regulator has jurisdiction are still shifting year to year, which rewards people who can build a control process durable enough to survive a changing rulebook rather than one built for the requirements as they happen to read today.