Guide · For hiring clients

Compliance & Regulatory Talent Acquisition: A Hiring Guide

Hiring a Chief Compliance Officer or a senior regulatory and risk leader is one of the most consequential decisions a regulated business makes — and the market is tight. This guide sets out what to look for, how the brief changes by sector, and how to win the people who are never on a job board.

Hire compliance talent See compliance recruitment
01 Start here

The named pool is bigger than the bench you can actually hire.

Pick where on the funnel you actually need to hire. The number you can use collapses the further down you go.

6,749

Lawyers across the major US & UK markets who name compliance & regulatory work among their practices — the headline pool, and the one that flatters the supply. Sartori & Partners market mapping (2026 snapshot)

The headline pool is real, but the bench a serious mandate needs is a fraction of it — senior, concentrated, and not on the market. Every number is shown below. (Proprietary supply figures; a single 2026 snapshot, not a trend.)

02 The market

A seller's market for regulatory talent.

Across banking, asset management, fintech, insurance and healthcare, the demand for senior compliance and regulatory professionals has outrun the supply of people qualified to fill the seat. Regulatory expectations keep rising, enforcement is active, and almost every regulated company — alongside most of the law firms that advise them — is building or deepening a compliance bench at the same moment. The arithmetic is simple and unforgiving: more mandates than there are proven leaders to run them.

That has two practical consequences for anyone hiring. First, the strongest candidates are rarely looking. They are employed, performing, and approached constantly — which means a job posting reaches the wrong half of the market. Winning them is a question of confidential, targeted outreach and a credible proposition, not advertising. Second, you are competing on more than cash. Mandate, reporting line, board access and the seriousness of the organisation's commitment to doing it properly are all part of the offer.

Our benchmarking on this market is informed by the recognised public sources — Equilar's General Counsel Pay Trends, the ACC Chief Legal Officer Survey, Salary.com in-house compensation data, and the CLOC State of the Industry report. We map the live market ourselves and cross-check it against these; we recommend hiring teams consult them too.

From the named pool to the bench you can actually hire

The headline number narrows at every step — geography, then seniority, then a candidate’s willingness to move. Structure only; the counts sit in section 03.

  1. Named poolEveryone who lists compliance & regulatory work among their practices.
  2. Right geographyConcentrated in a handful of metros, not spread evenly across the market.
  3. Partner-level seniorityThe proven-leader, regulator-credible tier a serious mandate needs.
  4. Reachable & willingEmployed, performing, approached constantly — won only by direct outreach.
The arithmetic is simple and unforgiving: more mandates than there are proven leaders to run them.
On the market
03 The evidence

Demand outruns supply — shown, not asserted.

“A seller's market” is easy to claim. Here is the structure behind it: a named talent pool that is smaller than it looks, concentrated in a handful of metros, against rising regulatory burden and live demand on our own desks.

6,749
lawyers across the major US & UK markets name compliance & regulatory work among their practices.
Sartori & Partners market mapping (2026 snapshot)
2,676
of them sit at partner level — the most senior, most regulator-credible tier. The proven-leader pool is a fraction of the named field.
Sartori & Partners market mapping (2026 snapshot)
3,107
of the named specialists are in the US, and they cluster heavily by metro rather than spreading evenly.
Sartori & Partners market mapping (2026 snapshot)

Across the major US & UK legal markets we map, 6,749 lawyers name compliance & regulatory work among their practices — but only 2,676 are at partner level. The senior, regulator-credible bench that a serious mandate actually needs is a fraction of the headline number, and it is largely employed and not looking. That is the supply side of the squeeze. (Proprietary supply figures; a single 2026 snapshot, not a trend.)

Where the US compliance bar actually sits

The supply is not spread evenly. Compliance talent pools around regulatory power, and one market dwarfs the rest — a useful steer on where a national search has to be built from.

Lawyers naming compliance & regulatory practice, by US metro, plus the UK lead. Washington, DC dwarfs every other market — the regulatory gravity well a national search starts from.

Sartori & Partners market mapping of the major US & UK legal markets — a single 2026 snapshot (structure, not trend).

Lawyers naming compliance & regulatory practice, by metro. US metros plus the UK lead. Source: our proprietary market mapping of the major US & UK legal markets — a single 2026 snapshot (structure, not trend).
MarketCompliance specialists
Washington, DC 1,136 #1 US market — the regulatory gravity well
New York 527
Chicago 193
Philadelphia 132
San Francisco 127
London (UK lead) 942 Largest single UK compliance market

Washington, DC is the single largest US compliance market by a wide margin — the regulatory gravity well. New York is the clear #2, and a serious national search starts in those two before it goes anywhere else.

And the demand is live, and rising

On the demand side, two things are true at once. First, on our own desks right now there are 568 open compliance & regulatory mandates across the markets we cover — a live figure, recomputed every time this page is built. Second, the regulatory burden that creates those mandates is climbing: the SEC received a record 53,753 whistleblower tips, complaints and referrals in fiscal year 2025, up from roughly 24,000 the year before[1], and Thomson Reuters' Cost of Compliance research finds 61% of respondents expect the cost of senior compliance officers to rise, with recruiting skilled staff a recurring challenge[2]. On the pay side, senior CCO compensation at public companies runs into six figures total — see our CCO pay guide for the full reconciliation of public survey data. More mandates, a thinner senior bench, and an already-restless incumbent population: that is what a seller's market looks like in numbers.

The rising-burden signal the demand thesis rests on: SEC whistleblower tips, complaints and referrals, FY2024 vs FY2025 — a record in fiscal 2025.

SEC FY2025 Enforcement Results (FY ended 30 Sep 2025), via National Law Review / SEC. FY2024 figure ~24,000.

The squeeze, as a single equation

Rising burdenenforcement active, expectations climbing Thin senior benchpartner-level supply a fraction of the named pool Restless incumbentsemployed, performing, approached constantly
A seller’s marketmore mandates than there are proven leaders to run them
  1. SEC — “SEC Announces Enforcement Results for Fiscal Year 2025” (record 53,753 tips, up from ~24,000 in FY2024). Via National Law Review: natlawreview.com; original: sec.gov. Accessed June 2026.
  2. Thomson Reuters Institute — Cost of Compliance Report (61% expect the cost of senior compliance officers to rise; recruiting skilled compliance staff a noted challenge): thomsonreuters.com. Accessed June 2026.
  3. Salary.com — in-house counsel and CCO compensation benchmarks by role, experience and sector: salary.com. Accessed June 2026.
More mandates, a thinner senior bench, and an already-restless incumbent population: that is what a seller’s market looks like in numbers.
On the squeeze
04 The brief

What to look for in a CCO or regulatory leader.

Titles travel; substance does not. A strong compliance leader is more than a custodian of a rulebook. When we scope a search, we screen against the qualities that actually predict success in the seat — and we test them against real decisions the candidate has made, not the frameworks they can recite.

The qualities that matter

Independence & integritythe non-negotiable foundation — held the line when it was uncomfortable
Programme-building muscledesigned and operated a programme end-to-end, not just maintained one
Regulatory credibility & commercial judgmentbelieved across the table; enables the business safely rather than only saying no
Seniority of voicethe standing to escalate, to the board, and be heard
01

Regulatory credibility

Can this person sit across the table from a regulator, examiner or auditor and be believed? Earned through having navigated an enforcement action, an examination, a remediation or a consent order — and being able to speak to it candidly.

02

Commercial judgment

The best compliance leaders enable the business to move safely; they do not simply say no. Look for someone who has helped launch a product, enter a market or close a deal within the guardrails, not someone whose only instinct is to block.

03

Seniority of voice

Does the candidate carry the standing to escalate — including to the board — and be heard? A CCO who can be quietly overruled is a control failure waiting to happen.

04

Programme-building muscle

Has this person designed and operated a compliance programme end-to-end: risk assessment, policies, monitoring and testing, training, reporting, and remediation? Maintaining an inherited programme is a different skill from building one.

05

Independence & integrity

Tenure, references and track record should show someone who held the line when it was uncomfortable. This is the non-negotiable.

Decide the reporting line before you open the search

One question shapes everything else: to whom does the role report? Many organisations have the CCO report functionally to the board or a board committee, with an administrative line to the General Counsel or CEO — preserving independence while keeping the function close to legal and the business. Others fold compliance under the GC entirely. There is no universally correct answer, but the choice determines the seniority, profile and compensation you need, and it is one of the first questions a strong candidate will ask. Settle it first.

To whom does the CCO report?

Functional line to the board / committee Maximum independence; admin line to GC or CEO keeps it close to legal and the business.
Administrative line to GC or CEO Keeps the function close to leadership and the day-to-day; pair it with the board line above.
Folded under the GC entirely Simplest structure; weigh it against the independence a regulated business may need.

No universally correct answer — but the choice sets the seniority, profile and compensation, so settle it first.

Titles travel; substance does not.
On the title
05 Sector nuance

The same discipline, a different brief.

Compliance is one profession, but the centre of gravity shifts by sector. Hiring for the regime, not just the title, is what separates a shortlist that works from one that looks impressive on paper.

I

Banking, Markets & Asset Management

Depth in a mature supervisory regime: AML/BSA, market conduct, prudential and SEC/FINRA expectations. You are hiring command of an established rulebook and the standing to face examiners.

II

Fintech & Payments

Build-from-scratch instinct: money-transmission licensing, a fast-moving product, and the ability to translate between engineers and regulators. Range, pace and pragmatism beat pure incumbency.

III

Healthcare & Life Sciences

HIPAA, fraud-and-abuse, the False Claims Act and FDA/quality interplay. The premium is on someone who has lived through enforcement, remediation or an integrity programme.

The discipline is shared; the centre of gravity is not. Hire for the instinct the sector actually rewards.

Sector Centre of gravity The instinct that wins
Banking, markets & asset management Depth in a mature supervisory regime Command of an established rulebook and the standing to face examiners
Fintech & payments Build the function from a near-blank page Range, pace and pragmatism over pure incumbency
Healthcare & life sciences Lived through enforcement, remediation or an integrity programme Fluency in the sector’s specific fraud-and-abuse and quality interplay

Screen for the right regime, not just the right title. The rulebook a candidate actually commands is the whole game.

Sector The regime to screen for
Banking & asset management Prudential, AML/BSA, market conduct, SEC/FINRA expectations
Fintech & payments Money-transmission licensing and a fast-moving product; translates between engineers and examiners
Healthcare & life sciences HIPAA, fraud-and-abuse, the False Claims Act and FDA/quality interplay

The practical implication: a brilliant bank CCO is not automatically the right hire for a Series-B payments company, and a healthcare compliance veteran will not, by default, be fluent in market-conduct rules. We calibrate the brief to your regime, your stage and your risk calendar before approaching anyone — which is why our shortlists are short.

Screen for the right regime, not just the right title.
On sector fit
06 Compensation

What it costs to hire — directional context.

Compensation for senior compliance and regulatory talent varies widely by sector, company size, region and the scope of the mandate, so we are deliberately cautious about quoting single numbers. As directional context: senior compliance leadership (CCO and equivalent) commands six-figure base salaries with meaningful bonus and, in many cases, equity — with the top of the range concentrated in large banks, asset managers and scaled fintechs, and more modest ranges in earlier-stage companies and smaller regulated firms. All figures are as of 2026 and vary by market, firm, sector and hours.

Senior compliance leadership pay is a range, not a number — six-figure base with meaningful bonus and, often, equity, widening toward large banks, asset managers and scaled fintechs. Directional context only; click or hover a marker for where each point sits. All figures are as of 2026 and vary by market, firm, sector and hours.
the directional range
Earlier-stage / smaller regulated firmsLarge banks · asset managers · scaled fintechs

Earlier-stage companies & smaller regulated firms

The lower, more modest end of the directional range — still six-figure base for senior leadership, with thinner bonus and equity.

Salary.com — CCO benchmarks ↗

For our own working ranges, see the compliance officer salary guide for 2026. Where you need exact, hard cash figures — for example to anchor a law-firm compensation conversation against associate scales — see the 2026 BigLaw associate salary scale, which sets out the published market scale precisely.

07 Sources we rely on

The benchmarks behind our market view.

We map the live market ourselves and cross-check it against the recognised public references. Every external figure on this page traces to a publisher and a live URL below; the supply counts are our own market mapping, reported as a single 2026 snapshot.

Every external number here traces to a public source

4 references
  1. SEC — Enforcement Results for Fiscal Year 2025 sec.gov ↗
  2. National Law Review — 2025 SEC Enforcement Results natlawreview.com ↗
  3. Thomson Reuters Institute — Cost of Compliance Report thomsonreuters.com ↗
  4. Salary.com — Chief Compliance Officer salary benchmarks salary.com ↗

The benchmark library, at a glance

Sortable — click a column header to reorder. These are the public references that inform our benchmarking, and the ones we recommend hiring teams consult directly.

The recognised public benchmarks behind our market view. “Type” groups them by what they measure best. Click any column header to sort.
Source Type What it tells you
Equilar — General Counsel & Executive Pay Trends Pay Where a CCO sits relative to the legal C-suite in public companies.
ACC — Chief Legal Officer Survey Structure CLO and legal-department structure, scope and reporting lines — context for where compliance reports.
Salary.com — Compliance & Legal Benchmarks Pay Broad-market in-house and compliance salary ranges by role, experience and metro.
CLOC — State of the Industry Operating model How legal and compliance functions are organised, staffed and measured — where demand is heading.
SEC — FY2025 Enforcement Results Demand signal Record 53,753 whistleblower tips — the rising-burden signal behind the demand thesis.

We do not publish numbers we cannot attribute. The supply counts are our own market mapping, reported as a single 2026 snapshot of structure, not a trend; every pay, enforcement and demand-trend claim carries a real publisher and a live URL.

Compliance hiring: common questions

What should we look for when hiring a Chief Compliance Officer?

Beyond technical command of the relevant rulebook, prioritise three things: regulatory credibility (can this person sit across the table from a regulator or examiner and be believed), commercial judgment (will they enable the business safely rather than simply say no), and seniority of voice (do they carry the standing to escalate, including to the board, without being overruled). Test for real decisions under pressure — a remediation they led, an enforcement action they navigated, a control they re-built — not a recitation of frameworks.

How is hiring compliance talent different in fintech versus banking or healthcare?

The discipline is shared but the centre of gravity differs. In banking and asset management you are hiring depth in a mature supervisory regime (think prudential, AML/BSA, market conduct, SEC/FINRA expectations). In fintech and payments you need someone comfortable building the function from a near-blank page, managing money-transmission licensing and a fast-moving product, and speaking fluently to both engineers and examiners. In healthcare and life sciences the premium is on HIPAA, fraud-and-abuse, the False Claims Act and FDA/quality interplay. Screen for the right regime, not just the right title.

Why is regulatory and compliance talent so hard to hire right now?

Demand has outrun supply. Regulatory expectations keep rising across sectors, enforcement is active, and almost every regulated company plus most law firms are building or deepening a compliance bench at the same time. The strongest candidates are rarely on the open market — they are employed, performing, and approached constantly. Winning them is a question of targeted, direct outreach and a credible value proposition, not a job posting.

What does compliance and regulatory talent earn in 2026?

Compensation varies widely by sector, company size, region and scope of mandate, so treat any single figure with caution. As directional context, senior compliance leadership (CCO and equivalent) commands six-figure base salaries with meaningful bonus and, in many cases, equity — with the top of the range concentrated in large banks, asset managers and scaled fintechs. The authoritative public benchmarks we rely on include the ACC Chief Legal Officer Survey, Equilar General Counsel Pay Trends, Salary.com in-house compensation data and the CLOC State of the Industry report. For our own working ranges see the compliance officer salary guide for 2026, and for exact associate cash scales see the 2026 BigLaw associate salary scale. All figures are as of 2026 and vary by market, firm, sector and hours.

Should a compliance hire report to the General Counsel or to the CEO and board?

There is no single right answer, but reporting line is a substantive design decision, not an afterthought. Many organisations have the CCO report functionally to the board (or a board committee) with an administrative line to the GC or CEO — preserving independence while keeping the function close to legal and the business. Decide the structure before you open the search, because it shapes the seniority, profile and compensation you need, and it is one of the first questions a strong candidate will ask.

How quickly can you fill a senior compliance or regulatory mandate?

A focused search for a senior compliance or regulatory leader typically runs over a number of weeks rather than days — long enough to map the market properly and approach passive candidates carefully, short enough to keep momentum. Interim and fractional compliance leadership can be deployed faster to cover a gap, a remediation or a licensing push while the permanent search runs. We scope the timeline against your risk calendar at the outset.

08 Related

Keep reading.

Hire compliance talent

Building a compliance bench? Start with a private conversation.

Tell us the mandate, the regime and the risk calendar. We map the market, approach the right people directly, and return a short, defensible shortlist.