Compliance Officer Career in the UK: Routes and Qualifications

A compliance officer career in the UK has no single mandatory qualification. The FCA's guide to the Senior Managers and Certification Regime (SM&CR) for solo-regulated firms does not name a qualification for the compliance oversight role (SMF16). It points instead to a fit and proper test that includes whether the person meets any relevant FCA training and competence requirements. In practice, people build a compliance career through experience and recognised qualifications from bodies such as the International Compliance Association (ICA) and the Chartered Institute for Securities & Investment (CISI).

ICA stands for the International Compliance Association, the body whose qualifications are covered below. This guide covers the UK only and was checked against the sources listed on 15 October 2026. We have not included salary figures, because none of the regulator or awarding-body pages we reviewed give them.

What a compliance officer does, and where SMF16 fits

"Compliance officer" is a job title rather than a regulated one. The regulated role is the compliance oversight function. The FCA's SM&CR guide describes SMF16 as "the person responsible for the compliance function in the firm and reporting to the governing body on this". The FCA Handbook (SUP 10C.4.3R) lists SMF16, the compliance oversight function, among the FCA required functions.

Whether a firm needs someone in that role depends on its SM&CR category and its Handbook rules:

• According to the FCA guide, SMF16 is a required function in the Core and Enhanced categories and in third-country branches.
• In Limited Scope firms it applies only to certain firm types, such as Class 1 claims management companies and some authorised professional firms.
• The guide says required functions apply because of specific Handbook rules, and that firms are not required to hire someone for a role the Handbook does not require.

SMF16 is a Senior Management Function, so the person needs FCA approval before starting, and the Certification Regime does not apply to it. Not every compliance job is an SMF16 role. SMF16 is the person responsible for the function, and other compliance roles sit within that function, which is why the career steps below matter.

Recent changes to the regime

The FCA's solo-regulated firms guide we used is dated July 2019, so check it against the changes since. The FCA published PS26/6 (Senior Managers and Certification Regime review) in April 2026. It states that most changes take effect on 24 April 2026, with further process changes from 10 July and 30 July 2026. The areas it lists include the 12-week rule, the Certification Regime and thresholds for enhanced firms. The policy statement page does not mention SMF16, so we cannot say whether any of these changes alter that role. The FCA also says it expects to consult on a second phase of reforms later in 2026, if the Treasury's proposed changes proceed.

Qualifications that support a compliance career

International Compliance Association (ICA)

The ICA publishes a list of qualification levels, which we summarise below. It says its Certificate and Specialist qualifications align with benchmarks for the Regulated Qualifications Framework (RQF), and its Advanced Certificate to Postgraduate qualifications align with the Quality Assurance Agency's benchmarks for higher education.

The ICA Certificate in Compliance is its introductory route. The ICA says it is for anyone working in or aspiring to work in compliance, lists no formal prerequisites, is assessed by a one-hour online multiple-choice exam, and gives two months of access (it can be finished in as little as four weeks). It is awarded in association with Alliance Manchester Business School at the University of Manchester. We cover the full ladder in our guide to ICA qualifications.

At the senior end, the ICA Certified Head of Compliance is designed for senior people who are new to the role of Head of Compliance or Chief Compliance Officer (SMF16). The ICA says applicants need a good standard of English plus either the current role or the aspiration to a Head of Compliance role having completed the ICA Diploma in Governance, Risk and Compliance or equivalent. It is based on FCA requirements and carries 50 ICA CPD hours.

On membership, the ICA says Professional Membership (MICA) is open to those who have completed an ICA Certificate course or higher, while Fellow Membership (FICA) is open to those who have completed a Professional Postgraduate Diploma or one of the certified practitioner courses, or who qualify through its Experienced Practitioner Route. It also says that once qualified, "you're qualified for life" with no recertification required, although that is a statement about ICA recertification and not about your employer's or the FCA's CPD expectations.

Chartered Institute for Securities & Investment (CISI)

The CISI lists these compliance and risk qualifications on its site, with its own levels: Global Financial Compliance (Level 3), Risk in Financial Services (Level 3), Combating Financial Crime (Level 3), Climate Risk Certificate (Level 5) and the Diploma in Investment Compliance (Level 6). It marks Ofqual-regulated qualifications with a plus sign.

The Diploma in Investment Compliance is the main career qualification. The CISI says it is regulated by Ofqual as a Level 6 qualification and is suitable for practitioners who wish to pursue a career in compliance, particularly those at supervisory level aspiring to a senior management role. Candidates pass three units: UK Regulation & Professional Integrity; one unit from Global Financial Compliance, Combating Financial Crime or Risk in Financial Services; and Regulation and Compliance. The CISI gives a total qualification time of 476 hours and sets no entry or eligibility requirements, though it warns that the Regulation & Compliance exam is challenging. Passing entitles you to join at Member (MCSI) level.

A sensible career path

The sources describe qualifications, not job ladders, so treat this section as practical guidance rather than a rule. A typical sequence is:

• Get in: an introductory qualification such as the ICA Certificate in Compliance, or a CISI Level 3 unit, shows you understand regulation and the role of the compliance function.
• Specialise or broaden: pick a specialism (anti money laundering, financial crime, governance) or a general route such as the CISI Diploma in Investment Compliance or an ICA Advanced Certificate.
• Move towards oversight: an ICA Diploma or Postgraduate Diploma, or the CISI Diploma, supports applications for supervisory and senior posts.
• Prepare for accountability: if you aim to hold SMF16, learn the FCA's fit and proper expectations and the firm's SM&CR category. The ICA Certified Head of Compliance course is aimed at exactly that step.

Keep your own learning records as you go. Our training matrix template for compliance training is a practical way to track what you and your team have completed.

Frequently asked questions

Do I need a qualification to become a compliance officer?

The FCA's SM&CR guide does not name a required qualification for SMF16. Individual employers set their own requirements, so check job descriptions.

Is the Certification Regime relevant to SMF16?

No. The FCA guide says SMF16 and SMF17 are Senior Management Functions and so fall under the Senior Managers Regime, not the Certification Regime.

What is the difference between SMF16 and SMF17?

SMF16 is the compliance oversight function. SMF17 is the Money Laundering Reporting Officer function, which covers oversight of the firm's compliance with the FCA's rules on systems and controls against money laundering.

How much does a compliance officer earn?

We have not included salary figures because none of the official sources reviewed publish them. Check current job adverts and recruiter surveys, and treat them as indicative.

Does ICA membership have to be renewed?

The ICA says that once qualified, you are qualified for life, with no recertification required. Your firm may still expect you to keep up CPD, and ICA membership has its own terms.

Where to go next

Pick the qualification that matches the role you want in the next two or three years, then read the awarding body's current specification before you register. For structured learning that supports your own development record, see the CPD hub.

This article is general information, not regulatory, legal or compliance advice. SM&CR rules and awarding-body requirements change, so check the FCA Handbook and the relevant body for the current position.