Compliance is a regime-specific profession. Someone who has spent five years under FCA rules in consumer credit is not immediately interchangeable with someone who has spent five years under GDPR in a technology business, even though both are compliance officers. The CV therefore has to name the regime, the rulebook and the regulator in the first few lines.
The second thing reviewers look for is whether you do compliance or administer it. Maintaining a policy register is administration. Running a monitoring programme, setting risk appetite thresholds, challenging a business decision and being the named contact for the regulator is the profession.
A third, quieter signal is how you handle findings. Compliance officers who can describe an issue they raised, the resistance they met and how it was resolved are far more convincing than those whose CVs suggest nothing has ever gone wrong.
This example is written for a compliance officer with six years in a UK consumer finance firm.
hira.farooq@example.co.uk+44 7700 900137Leeds, United Kingdomlinkedin.com/in/example-hira-farooq
Profile
Compliance officer with six years in FCA-regulated consumer finance. Own a monitoring programme of 14 reviews a year across affordability, arrears and financial promotions, act as deputy MLRO, and led Consumer Duty implementation across four products including the outcome monitoring framework now reported to board quarterly.
Professional Qualifications
International Compliance Association (ICA) Diploma in Governance, Risk and Compliance
ICANovember 2022
ICA Certificate in Anti Money Laundering
ICAApril 2020
CISI Level 3 Certificate in Financial Services Risk and Regulation
Complaints & RedressRoot cause analysis, Financial Ombudsman Service submissions, Vulnerable customer handling
Professional Experience
Compliance Officer
Wharfedale Consumer Finance · Leeds, United KingdomJuly 2021 – Present
•Own the compliance monitoring programme for a consumer credit firm authorised under CONC, delivering 14 reviews a year across affordability assessment, arrears handling and financial promotions.
•Led Consumer Duty implementation across four products, including fair value assessments, target market definitions and the outcome monitoring framework now reported to board quarterly.
•Deputy MLRO since 2023: review escalated customer due diligence cases, approve or reject around 40 higher-risk onboarding decisions a month, and prepared 11 suspicious activity reports in the last 12 months.
•Rejected two proposed financial promotions where the representative APR was insufficiently prominent, and worked with marketing on a compliant redesign that launched three weeks later.
•Reduced upheld Financial Ombudsman Service outcomes from 9 in a year to 2 by rewriting the arrears contact process after root cause analysis of 60 complaints.
•Deliver quarterly regulatory training to 90 front-line staff and maintain the training completion record for SMCR purposes.
Compliance Analyst
Aireborough Payments Ltd · Leeds, United KingdomMarch 2019 – June 2021
•Carried out customer due diligence reviews and sanctions screening alert clearance for a payments business onboarding around 300 merchants a month.
•Performed complaint root cause analysis and produced the quarterly complaints report for the risk committee.
•Supported the firm’s response to two regulatory information requests, preparing the underlying data and drafting sections of the response.
Education
LLB (Hons) Law
University of Leeds · Leeds, United KingdomSeptember 2015 – June 2018
Upper Second Class (2:1)
Professional Memberships
International Compliance Association
MemberMay 2020 – Present
Languages
EnglishNative
UrduC1
Compliance Officer example on the Legal Classic layout. All details are fictional and shown for demonstration only.
What recruiters expect
Before writing anything, it helps to know what the person reading is checking for. In this field that is usually a short, specific list:
The regulatory regime and the specific sourcebooks or regulations you work under.
Monitoring programme detail: how many reviews a year, what areas, what you found.
Financial crime responsibilities - AML, sanctions, fraud - and whether you hold a named role.
Regulator interaction: submissions, information requests, supervisory meetings.
Advisory work with the business, including where you have said no.
Recommended CV structure
This is the running order the example uses. It is a starting point rather than a rule, but the order reflects what tends to be read first in this profession.
Profile — Three or four lines positioning you for the role.
Professional Qualifications — Completed certifications with the issuing body.
Core Skills — Grouped skills, for example "Languages" and "Tooling".
Professional Experience — Paid roles, in reverse chronological order.
Education — Degrees, diplomas and school-leaving qualifications.
Professional Memberships — Bodies you belong to, with membership numbers where relevant.
Continuing Professional Development — Structured training posts and courses.
Languages — Spoken languages with CEFR levels.
Sections worth adding
Regulatory Projects — Use for implementation programmes such as Consumer Duty or a new authorisation.
Skills worth including
Grouped rather than listed in one block. Grouping makes a long list readable and shows that you can tell the difference between the things you use daily and the things you have touched.
Regulatory Frameworks
FCA Handbook (CONC, SYSC, DISP) · Consumer Duty · SMCR · UK GDPR and Data Protection Act 2018 · Money Laundering Regulations 2017
Monitoring & Assurance
Compliance monitoring programme · Thematic reviews · Call and file quality reviews · Root cause analysis · Breach and incident management
Financial Crime
AML risk assessment · Customer due diligence · Sanctions and PEP screening · Suspicious activity reporting · Fraud typologies
Complaint root cause analysis · Financial Ombudsman Service submissions · Redress calculation review · Vulnerable customer handling
Beyond the technical list: Challenging commercial pressure, Translating rules into workable process, Training front-line staff, Writing for a regulator, Managing an investigation calmly. These belong inside your experience bullets, demonstrated, rather than in a list of adjectives.
Example professional summary
Three or four lines, positioned for the role rather than describing your personality. Two versions you can adapt:
Compliance officer with six years in FCA-regulated consumer finance. Own a monitoring programme of 14 reviews a year across affordability, arrears and financial promotions, act as deputy MLRO, and led Consumer Duty implementation across four products including the outcome monitoring framework now reported to board. ICA Diploma in Governance, Risk and Compliance.
Compliance analyst moving into an officer role, with experience across complaint root cause analysis, financial promotion approval and customer due diligence in a payments business. Working towards the ICA Diploma.
Writing your experience
The difference between a CV that gets a call and one that does not is almost always in the bullet points. Each pair below shows a real rewrite of the kind of line that appears on most CVs in this field.
Weak
Ensured the business complied with FCA regulations.
Stronger
Own the compliance monitoring programme for a consumer credit firm authorised under CONC, delivering 14 reviews a year across affordability assessment, arrears handling and financial promotions.
Names the regime, the sourcebook, the programme size and the areas covered.
Weak
Handled AML checks.
Stronger
Deputy MLRO from 2023: review escalated customer due diligence cases, approve or reject around 40 higher-risk onboarding decisions a month, and prepared 11 suspicious activity reports in the last 12 months.
States the named role, the decision volume and the reporting output without disclosing any case.
Weak
Worked on Consumer Duty implementation.
Stronger
Led the Consumer Duty implementation across four products, including fair value assessments, target market definitions and the outcome monitoring framework now reported to board quarterly.
Shows ownership of the substantive deliverables rather than participation in a project.
Weak
Advised the business on compliance matters.
Stronger
Rejected two proposed financial promotions on the grounds that the representative APR was insufficiently prominent, and worked with marketing on a compliant redesign that launched three weeks later.
A concrete instance of challenge followed by a constructive resolution, which is exactly the balance employers want.
Taken from the example
The sample CV for this profession is fully written. A few sections from it, so you can see the level of specificity that works:
Experience
Compliance Officer, Wharfedale Consumer Finance
Own the compliance monitoring programme for a consumer credit firm authorised under CONC, delivering 14 reviews a year across affordability assessment, arrears handling and financial promotions.
Led Consumer Duty implementation across four products, including fair value assessments, target market definitions and the outcome monitoring framework now reported to board quarterly.
Deputy MLRO since 2023: review escalated customer due diligence cases, approve or reject around 40 higher-risk onboarding decisions a month, and prepared 11 suspicious activity reports in the last 12 months.
Rejected two proposed financial promotions where the representative APR was insufficiently prominent, and worked with marketing on a compliant redesign that launched three weeks later.
Education
LLB (Hons) Law, University of Leeds — Upper Second Class (2:1)
Certifications and registration
International Compliance Association (ICA) Diploma in Governance, Risk and Compliance — ICA
ICA Certificate in Anti Money Laundering — ICA
CISI Level 3 Certificate in Financial Services Risk and Regulation — CISI
Common mistakes
Regime-neutral language
"Ensured regulatory compliance" could describe any job in any sector. Name the rules; that is the entire value of the specialism.
No monitoring evidence
A compliance officer who has never described a review they carried out looks like a policy administrator. Give the number of reviews and one substantive finding.
Avoiding conflict entirely
The role exists because commercial and regulatory pressure sometimes conflict. A CV with no example of challenge omits the hardest part of the job.
Claiming a controlled function you do not hold
Named roles such as MLRO or SMF holder are on the public register. State them only if you actually held them, and give the dates.
Disclosing incidents in identifying detail
Describe the issue category and the remediation, never the customer, the individual or the specific regulatory correspondence.
ATS considerations
Applicant tracking systems behave differently by sector, and generic advice is often wrong for a given field. These points are specific to compliance officer applications:
Name the regulator explicitly. "FCA", "PRA", "ICO" and their equivalents are common hard filters.
Spell out "anti-money laundering (AML)" and "know your customer (KYC)" in full at least once.
Cite the specific sourcebook or regulation rather than "regulatory knowledge" - CONC, SYSC, MLR 2017, UK GDPR.
State qualification names in full: "International Compliance Association (ICA) Diploma in Governance, Risk and Compliance".
The Minimal ATS layout is built for this, and the ATS guide covers what parsers do to a file in more detail.
Questions about compliance officer CVs
Which compliance qualification is most useful?
The International Compliance Association diplomas are the most widely recognised across financial services, and the CISI regulatory certificates are common in the UK. For data protection roles, a recognised practitioner certificate in UK GDPR carries more weight.
Can I move between regulated sectors?
Yes, but expect to demonstrate how the framework transfers. Monitoring methodology, root cause analysis and governance reporting are portable; the rulebook is not, so show that you understand what you would need to learn.
Should I mention a regulatory breach I managed?
Yes, at the level of category and remediation. "Managed a breach relating to arrears communication timing, including root cause analysis and a customer contact exercise" is informative and identifies nobody.
Is a law degree necessary?
No. Compliance draws from law, audit, operations and financial crime backgrounds. What matters is demonstrable knowledge of the applicable regime and the judgement to apply it.