Chief Compliance Officer
Owns whether the company does what the rules require — and can prove it afterwards.
CCO also means Chief Content Officer. The two seats share three letters and nothing else.
Who to hire
The shape of person who does this job well — and whether you should be hiring it at all yet.
Created by a regulator, almost always. Financial services, health, gambling, cannabis, government contracting and anything holding client money will expect a named, reachable compliance officer, sometimes personally accountable. Outside regulated sectors this is a part of the legal or finance seat rather than a seat of its own.
Education
Law, accounting or a sector-specific background. In regulated finance, the regulator may have its own fitness requirements for the person in the role.
Experience
6+ years in compliance within your regime, including one examination or audit. Ask what a regulator asked them for and how long it took to produce.
Vertical / domain experience
Entirely regulatory: AML, securities, health privacy, consumer credit and gaming each have their own rulebooks, examiners and record-keeping expectations.
What it pays, roughly
$72,010 median, Canada — for Administrative and regulatory occupations, the closest occupation Statistics Canada actually measures, measured from $59,010 to $75,005 over 182,000 people. That occupation is broader than this role, so read it as an anchor, not a salary band — and note that a startup usually pays below it in cash and above it in equity.
Credentials and certifications
What exists, who issues it, and whether it means anything for this seat. A credential is evidence of a floor, never of judgment — and in a few of these roles it is a legal requirement rather than a nice-to-have.
| Credential | Issued by | When it matters |
|---|---|---|
| CCEP — Certified Compliance & Ethics Professional | Society of Corporate Compliance and Ethics | The broad compliance credential across sectors. |
| CAMS — Certified Anti-Money Laundering Specialist | ACAMS | Required in substance anywhere you screen counterparties or move client money. |
| ISO 37301 — compliance management systems | International Organization for Standardization | A framework to run the function against, and something an enterprise buyer recognises. |
What this role does at each stage
The same title means three different jobs depending on how much money is in the bank. Read the stage you are at, then read the next one — that is what you are hiring toward.
Nobody, unless your activity is licensed — in which case it exists before your first customer does.
Fractional or part of the legal seat, with the registers and the record-keeping set up properly from the start.
A named seat wherever the regime requires one, independent enough of the business to say no.
Who it sits beside
A specialist seat is defined as much by the seats around it as by its own work — which hat it reports through, which one asks the adjacent question, and which one it must stay independent of.
Aligns with legal, which it often reports into, and with risk, which asks the adjacent question: compliance asks whether a rule was followed, risk asks what could go wrong whether or not a rule exists.
Can one person hold this and something else?
The whole point of the many-hats problem: which of these jobs merge safely into one person, and which merges quietly cost you money or control.
Merges well with
Merged with legal under a General Counsel below a few hundred people, except where the regulator requires independence.
Keep separate from
Compliance must be able to overrule revenue. If it reports to the person carrying the number, it will lose the argument that matters.
Reading a candidate
What good looks like in an hour, and what should stop the process.
Good signals
- Produces the register before being asked
- Knows the regulator’s current examination focus
- Has stopped something
Red flags
- Treats policies as the control
- No testing programme
- Reports into the business it supervises
What this role runs on
The software categories this seat lives in, each linked to the screen of who sells it — the incumbent, the challengers and what the lock-in is.