Compliance officers · the career path
How to become a compliance officer
The short answer · updated
Most compliance officers start in a junior compliance, risk or operations role in a regulated firm, or through an apprenticeship, then build regulatory knowledge with ICA or CISI qualifications. The usual path runs compliance analyst, compliance officer, compliance manager, then head of compliance. In an FCA-regulated firm, the senior compliance seat (SMF16) needs FCA approval before starting.
The routes in: analyst, officer, manager
Skills England’s occupational standard for the compliance and risk officer describes where most careers start: the role is found in every financial services organisation, and in finance functions elsewhere, and its typical job titles include compliance officer, anti-money laundering specialist, financial crime officer and risk officer. It is set at level 3, and there is an apprenticeship for it, so it can be a first job.
Others move across. Many compliance officers began in a customer-facing, operations, audit or legal role inside a regulated firm, learned the rules that applied to it, and moved into the compliance team. Law and finance graduates often join as analysts. What matters is learning how the rules apply to a real business, not where you started.
The ladder is usually compliance analyst or assistant, compliance officer, senior compliance officer or compliance manager, then head of compliance or chief compliance officer. Along the way most people specialise: advisory or monitoring, conduct, financial crime, or a sector such as investments, insurance, payments or consumer credit.
Qualifications: ICA and CISI
No law requires a compliance officer to hold a particular qualification, but employers look for one, and the senior roles usually expect a diploma. Two bodies cover most of the field.
- ICA Certificate in Compliance. The International Compliance Association’s introductory certificate (Level 2) covers why regulation exists, the role of the compliance function and the key compliance areas. It is aimed at people working in, or aspiring to work in, compliance.
- ICA Diploma in Governance, Risk and Compliance. The ICA calls its Level 6 diploma “the industry-standard qualification for compliance officers and managers”. It covers regulation, behavioural compliance, corporate governance and regulatory risk management.
- CISI Diploma in Investment Compliance. The Chartered Institute for Securities & Investment’s diploma is regulated by Ofqual at level 6 and is aimed at compliance practitioners, in particular those at supervisory level aspiring to a senior management role in investment firms.
What the job asks of you
The FCA’s rules describe the work you are training for. Under SYSC 6.1, a firm must have adequate policies and procedures to comply with the regulatory system and counter financial crime, and many firms must keep a permanent, independent compliance function that monitors and assesses those procedures and advises the people who carry out regulated activities. For common platform firms (banks and MiFID investment firms), that function reports to the management body at least once a year and runs a risk-based monitoring programme.
In practice, a hiring manager wants evidence that you can read a rule and say what it means for this business; write a policy people follow; plan and run monitoring; record and escalate breaches; handle a regulatory change; train staff; and say no clearly when you need to. The independence matters: a compliance officer should not be checking work they did themselves.
Senior roles and FCA approval (SMF16 and SMF17)
At the top of the ladder, the role becomes a regulated appointment. Under the Senior Managers Regime, the most senior people in a firm hold Senior Management Functions and need FCA or PRA approval before they start. Two are compliance seats: SMF16, the Compliance Oversight Function, and SMF17, the Money Laundering Reporting Function. In dual-regulated firms, the FCA alone approves both.
An approved senior manager has a Statement of Responsibilities and a Duty of Responsibility: if the firm breaches a requirement in their area, they can be held accountable if they did not take reasonable steps to prevent it. The firm must also assess that they are fit and proper at least once a year. Build a record of judgement, not just activity, before you apply.
The money laundering route has its own path: see what an MLRO does, and the MLRO jobs page for open roles.
Specialisms beside compliance
Compliance officers often move into neighbouring seats. Financial crime and anti-money laundering lead to the MLRO role. Data protection leads to the data protection officer seat, which has its own legal requirements under UK GDPR. Some move into risk, internal audit or regulatory change; others become the head of compliance in a smaller firm earlier than they would in a bank.
Fractional, interim and part-time compliance work
Smaller regulated firms often need a senior compliance officer for a few days a week rather than five. For an experienced compliance manager, a part-time or fractional role is a way to hold the full remit, including reporting to the board, sooner than a full-time promotion would allow. See part-time compliance jobs and the fractional MLRO page.
If you work through your own company, the off-payroll working rules (IR35) may apply. Status is decided by how each engagement runs, and a medium or large client makes the determination. Our IR35 guide sets out the tests.
Pay, and where to find compliance officer roles
Compliance officer pay depends on the sector, the size of the firm, the specialism, and whether the role carries an SMF approval. We set out pay or day rate for every candidate on a shortlist.
Our compliance officer jobs page lists permanent, interim and fractional roles. We recruit fractional, interim, part-time, temporary and permanent executives, and non-executive directors. For a firm hiring, we send a shortlist of 3–5, each with pay or day rate, availability and IR35 position set out.
Questions people ask
Do you need a degree to become a compliance officer?
No. Many compliance officers have degrees, but there are apprenticeship routes, and many people move into compliance from operations, customer-facing or audit roles inside a regulated firm. Employers care more about regulatory knowledge and judgement, which ICA and CISI qualifications help to show.
What qualifications do compliance officers need?
None is required by law. Common choices are the ICA Certificate in Compliance to start, then the ICA Diploma in Governance, Risk and Compliance or the CISI Diploma in Investment Compliance for senior roles.
Can you become a compliance officer with no experience?
Usually through a junior analyst, assistant or apprenticeship role first. Experience of the firm’s own business, for example in operations or customer service, is a common way into its compliance team.
Is the ICA or the CISI better?
Both are recognised. The ICA covers compliance, anti-money laundering and financial crime across sectors; the CISI Diploma in Investment Compliance is built for investment firms. Choose the one that fits the firms you want to work in.
What is SMF16?
SMF16 is the Compliance Oversight Function under the Senior Managers Regime: the senior management function for overseeing the firm’s compliance. It needs FCA approval before the holder starts. See what a compliance officer does.
What is the difference between a compliance officer and an MLRO?
A compliance officer covers the firm’s regulatory obligations broadly; the MLRO is the person responsible for its anti-money laundering systems and for deciding whether suspicions are reported. See what an MLRO does.
How do I hire a compliance officer?
Decide whether you need a permanent, interim, part-time or fractional compliance officer, and whether the role carries an SMF approval. To hire a compliance officer for set days a week, see our hub; we send a shortlist of 3–5, each with pay or day rate, availability and IR35 position set out.
