EXPOSED
The bulk of the job — reading regulations, screening transactions and filings against rule sets, drafting policies, assembling audit evidence, writing findings reports — is exactly the text-and-pattern work current AI does at usable quality, and RegTech vendors are already shipping it. What holds is the accountable layer: the named Chief Compliance Officer or BSA Officer whom regulators can personally sanction, the judgment call on whether an ambiguous transaction is escalated, and the human who sits across from an examiner. The modal compliance officer today sits closer to the screening-and-documenting tier than the accountable tier, which is why this scores as exposed rather than safe.
Mixed — a routine tier and a judgment tier. Alert adjudication, control testing, policy mapping to new rules, KYC file review and periodic risk assessments are all document-in/document-out work that transaction monitoring and RegTech platforms already draft or clear at first pass — a 7 rather than a 3 because interviewing a business line about why a control failed, and negotiating remediation deadlines with people who don't report to you, still needs a human in the room.
Some physical or field component. There is a physical tail — walking the trading floor or branch, observing a manufacturing line for OSHA or EPA conformance, pulling paper files during an on-site exam, and travelling to subsidiary offices — but it is scheduled, indoor, and a minority of the calendar, which puts it just above pure desk work rather than in the field-inspector range.
Certification preferred, not legally required. No licence is required to be a compliance officer, and most of the 417,000 in this SOC hold CAMS, CRCM or CCEP credentials that are employer preferences rather than a legal gate — the 9 reflects that a specific subset (the designated BSA/AML officer under 31 CFR 1020.210, the FINRA-registered Series 14 supervisor, the named CCO) can be individually fined or barred, and that personal exposure is real but attaches to a few titles, not the job family.
Some relationship component. Examiners, auditors and internal business partners do come to rely on a specific person's track record for straight answers and credible remediation commitments, but the deliverables — testing memos, SAR narratives, board reports — are institutional products that survive your replacement, so the relationship greases the work rather than being the work.
Meaningful discretion. Deciding whether an ambiguous wire is escalated to a SAR, whether a conflict is disclosable or disqualifying, and whether to self-report to a regulator are calls made on incomplete facts with legal consequences either way and no procedure that closes them — the 13 rather than 16 reflects that in most shops those calls are ratified by the CCO, legal, or a committee before they leave the building.
Emergency Management Directors EXPOSED
FF News reports MVB Bank has partnered with Bretton AI to automate back-office operations supporting its fintech banking business.
CNBC reports Goldman Sachs is deploying Anthropic's Claude to automate work in accounting and compliance functions.
Has AI actually changed your work?