How to write a compliance officer CV in financial services

Start with what the advert is actually testing

A compliance job advert in financial services is rarely testing whether you understand "compliance" as a concept. It's testing whether you've worked inside a specific regulatory perimeter — FCA solo-regulated, dual-regulated with the PRA, a payments firm under the EMRs, a consumer credit lender — and whether you've done first-line advisory work, second-line monitoring, or financial crime specifically. These are different jobs with overlapping titles. If your CV reads as generic "compliance experience" without saying which of these you've done, it gets set aside, because the hiring manager can't tell if you're the person they need.

So before you write a line, work out which of the three you're applying for, and write the CV for that one. A monitoring-plan-and-testing role wants evidence of sampling methodologies and issue closure. An advisory role wants evidence of giving the business an answer under time pressure. A financial crime role wants SARs, screening, and typologies. Don't blend them.

The qualifications and registrations that need to be visible

Put these near the top, not buried at the bottom under "training":

• ICA qualifications — Certificate, Diploma or Advanced Certificate in Governance, Risk and Compliance, or in Anti-Money Laundering, awarded with Alliance Manchester Business School. Say which level and which specialism; "ICA qualified" alone tells the reader nothing.
• ACAMS CAMS (Certified Anti-Money Laundering Specialist) — the standard credential for financial crime roles, and worth naming explicitly if you have it, since screening tools often search for it as a keyword.
• CISI qualifications — the Level 3 Combating Financial Crime or Level 4 Diploma in Investment Compliance, more common in asset management and wealth.
• Senior Manager Functions under SMCR — if you have held or deputised for SMF16 (Compliance Oversight) or SMF17 (Money Laundering Reporting Officer), say so by name and say whether you held the function or supported the holder. This is the single most scanned line on a compliance CV at manager level and above, because it tells the reader you've carried personal regulatory accountability, not just done the work behind someone who did.
• Fitness and propriety — a line confirming you're currently subject to SMCR conduct rules training and have no outstanding regulatory reference issues is worth including if you're moving between regulated firms, because the receiving firm will have to request one anyway.

If you hold none of the above, don't invent proximity to them. Say what training you've actually completed and let the experience carry the weight.

How experience is normally evidenced in this field

Compliance work is confidential by nature, which is exactly why vague CVs are so common and so unhelpful. You can't name the client whose transaction you queried or the individual whose account you closed. You can describe scale, mechanism and outcome without naming anyone:

• number and type of SARs filed or reviewed, and to which regime (UK MLR 2017, POCA)
• size and scope of the compliance monitoring programme you owned or contributed to — how many reviews a year, across which business lines
• a specific regulatory change you implemented, dated: Consumer Duty from July 2023, the Investment Firms Prudential Regime, EMIR Refit, the Overseas Funds Regime
• volume of sanctions or PEP screening handled, and which tool — World-Check, LexisNexis Bridger, Actimize, Fenergo for onboarding, SteelEye or Nice Actimize for trade surveillance
• FCA or PRA supervisory engagement you supported: a section 166 skilled person review, a thematic review response, a RegData/GABRIEL return you owned
• policies you drafted or owned end to end, and the SYSC, COBS, MAR or SUP module they sit under
• training delivered — audience size and topic, not just "delivered compliance training"

A line like "managed a team of four" is not evidence in this field. "Owned the AML monitoring plan across 3 business lines, closing 40 findings a year with no repeat breaches identified at the following annual review" is. If you can't attach a number honestly, describe the mechanism instead — what you actually did when a trade looked wrong, what happened when the business disagreed with your view.

What a compliance hiring manager scans for first

In order, roughly:

1. Which regulator, which permissions. FCA solo-regulated advisory firm, dual-regulated bank, payments institution, consumer credit — this tells them in one line whether your rulebook experience transfers.
2. First, second or third line. Did you advise the business, test the business, or audit the function that tests the business? These are not interchangeable and a CV that doesn't make this clear reads as unfocused.
3. SMF exposure, as above — held it, deputised for it, or reported into it.
4. Specific rulebook fluency — do you cite SYSC, COBS, MAR, the Money Laundering Regulations, or do you write "regulatory requirements" throughout. The second is a signal you've worked adjacent to compliance rather than in it.
5. Evidence of independence. A compliance officer who has never disagreed with a business decision and made it stick is a weak hire. If you have an example of pushing back and being right, put it on the page, anonymised.

They are not scanning for "strong communication skills" or "attention to detail." Everyone claims those. They're scanning for the vocabulary that tells them you've actually sat in the room.

What compliance CVs routinely leave out

The most common gap is reporting line and audience. Compliance officers write papers for committees — did yours go to a Board Risk Committee, an Audit Committee, an Executive Compliance Committee? Naming the committee tells the reader the seniority of the judgement you were making, and almost nobody includes it.

The second gap is the regulator relationship itself. If you've attended an FCA supervisory meeting, hosted a visit, or corresponded with a case officer during an investigation, that is rare and valuable experience and it's frequently left off because it feels like it should stay confidential. You can describe your role in the process — "prepared the firm's response to an FCA information request" — without naming the case.

The third gap is the advisory-versus-policing distinction. Candidates from a monitoring or audit background sometimes undersell the advisory judgement calls they made along the way, and advisory candidates undersell the testing and evidencing skills they'll need in a more second-line role. Say explicitly which you've done more of, because the reader is trying to work out exactly that.

The fourth is currency. Compliance is a field where the rules change under you — Consumer Duty, the Economic Crime and Corporate Transparency Act 2023, the FCA's new approach to enforcement transparency. A CV with no regulatory change work since before these came in reads as stale to someone hiring for a live seat, even if the underlying skill is sound.

What to do next

Pull up the last three adverts you applied to and check, line by line, whether your CV states the regulator, the line of defence, and any SMF exposure in the first third of the page. If it doesn't, that's the rewrite, not the wording of your personal statement. Then take one bullet point per role and turn it from a duty ("responsible for AML monitoring") into a mechanism and an outcome (what you monitored, what you found, what changed). If you're short on time to do this properly for every application, jobmarket.pro reads each advert, identifies which of these specifics it's asking for, and builds the application from your actual record rather than a generic template.