This guide is for VPs, COOs, heads of talent, and line-of-business leads who need to hire a CCO without spending six months on it. You'll get a copy-paste JD template, realistic 2026 salary ranges, the interview questions that actually separate strong candidates from well-rehearsed ones, and a clear picture of what good looks like at this level.
What a CCO actually owns.
The Chief Compliance Officer is the person accountable when the regulator calls. At a Series A-C fintech, that means owning the entire compliance program: BSA/AML, sanctions screening, KYC/KYB, consumer protection, and whatever product-specific obligations your license carries. They sit at the intersection of legal, operations, and product, and they have to be credible in all three directions.
A lot of companies get this wrong by treating the CCO as a sign-off function. The best CCOs are builders. They design the program from scratch, decide what to automate versus what needs human judgment, and walk into a board meeting able to explain exposure in plain English. That's a different profile from a compliance manager who happens to be senior.
For financial crime specifically, you want someone who understands the difference between banking fraud and startup fraud, between a FINRA-regulated entity and an MSB. The rules overlap, but the risk calculus doesn't. Generic compliance experience won't cut it if your product touches cross-border payments or crypto.
What this role does day-to-day.
The CCO's week splits roughly into 3 categories: program management, stakeholder management, and regulatory management.
Program management means keeping the compliance engine running: reviewing SAR filings, signing off on policy updates, overseeing your BSA officer if they're separate, and working with the risk team on model validation for transaction monitoring. At a 50-person fintech, the CCO is often doing some of this hands-on. At 200 people, they're managing the people doing it.
Stakeholder management is where a lot of CCOs either shine or sink. Product wants to ship fast. The CCO has to push back clearly, with reasoning, without being the department that always says no. The best ones have a reputation for saying "here's how we do this compliantly" rather than just "we can't do that."
Regulatory management covers exam prep, exam responses, and anything that lands in writing from FinCEN, the OCC, your state regulators, or your banking partner's compliance team. This last one is especially relevant if you're operating on a BaaS model: your sponsor bank's compliance team will have opinions, and your CCO has to manage that relationship.
Key responsibilities to include in your JD.
- Own and maintain the BSA/AML compliance program, including written policies, procedures, and controls
- Serve as the designated BSA Officer (or oversee the person in that role)
- Direct the KYC/KYB onboarding framework and ongoing customer due diligence reviews
- Manage sanctions screening processes and OFAC compliance
- Lead regulatory exam preparation and manage responses to examiner findings
- Report to the board and audit committee on compliance program status, risk exposure, and open items
- Partner with product and engineering on new feature compliance reviews and pre-launch sign-offs
- Oversee training programs for compliance, operations, and customer-facing teams
- Manage relationships with banking partners, payment networks, and external counsel
- Monitor regulatory developments and assess their impact on the business
Required skills and qualifications.
- CCO (Series A) 8+ years compliance, 2+ years in leadership, CAMS preferred, hands-on builder mindset
- CCO (Series B) 10+ years, prior CCO or Deputy CCO title, exam management experience, team management
- CCO (Series C+) 12+ years, regulatory relationships, enterprise program design, board-level communication
Beyond years, you're looking for 3 things that don't show on a resume cleanly: judgment under pressure, the ability to communicate risk without triggering panic, and genuine curiosity about how your product works. A CCO who doesn't understand your payment flow or your onboarding funnel will write policies that either don't fit or create unnecessary friction.
Fintech-specific experience matters more than it gets credit for. Someone who spent 15 years at a tier-1 bank may know AML deeply but find the pace and ambiguity of a 60-person startup genuinely difficult. And vice versa: a startup compliance lead who's never sat through a bank exam may not know what "exam-ready documentation" actually looks like to an examiner.
Tools and certifications.
Certifications worth requiring or preferring: CAMS (Certified Anti-Money Laundering Specialist) is the baseline for anyone in financial crime compliance. CGSS (Certified Global Sanctions Specialist) matters if your product has international exposure. CFE (Certified Fraud Examiner) is a plus for roles where fraud and AML overlap closely, which at most fintechs they do.
On the tools side: transaction monitoring platforms like Actimize, Featurespace, or Sardine; case management systems; sanctions screening via Dow Jones, Refinitiv World-Check, or similar. Comfort with SQL or basic data analysis is increasingly common at this level, especially at fintechs where the compliance team doesn't have a dedicated analytics function.
Salary ranges as of 2026.
These are US-based ranges. UK ranges run roughly 20-30% lower in base, with higher pension contributions sometimes partially offsetting that. Equity is increasingly standard at Series A-C and can be meaningful at earlier-stage companies.
| Stage / seniority | Base salary (US, 2026) | Total comp (with bonus) |
|---|---|---|
| CCO, Series A (first compliance hire) | $180,000 - $220,000 | $200,000 - $260,000 |
| CCO, Series B (managing a small team) | $210,000 - $260,000 | $240,000 - $310,000 |
| CCO, Series C+ (enterprise program) | $260,000 - $320,000 | $300,000 - $400,000+ |
One thing worth knowing: CCO candidates who are currently employed don't move for a lateral comp offer. If you want someone with a clean compliance record at a credible institution to leave a stable role, expect to pay 15-20% above their current base, plus equity that actually has a realistic path to value. Lowballing at this level is expensive; a failed CCO search costs 6-12 months of lost time on top of the opportunity cost.
Career path context.
Most CCOs at fintechs came from one of 3 paths: bank compliance (OCC-regulated institutions, often BSA officer roles), big-4 advisory (financial crime practice, regulatory remediation projects), or in-house at a regulated fintech that's a step or two ahead of yours. Each background has a different strength profile. Bank compliance people know how examiners think. Advisory people know how to build programs from a blank page. In-house fintech people know how to move fast without creating liability.
The career trajectory from CCO at a Series B typically goes to CCO at a larger company, Chief Risk Officer, or General Counsel (for those with dual JD/compliance backgrounds). Some move into board advisory roles. Understanding where someone wants to go helps you assess whether your role is genuinely a good fit or a stepping stone they'll leave in 18 months.
How to write the JD: copy-paste template.
The most common mistake in CCO job postings: they read like a regulatory filing. Dense, passive, list-heavy. Good candidates at this level are being approached constantly. Your JD has to communicate the actual challenge and why it's worth their time.
Chief Compliance Officer
Location: [City / Remote-friendly] Reports to: CEO / General Counsel
About the role.
We're building [one sentence on your product]. We're regulated as [MSB / state-licensed lender / bank partner program] and we're at the stage where compliance needs to be a strategic function, not just a checkbox. You'll own the program: BSA/AML, KYC/KYB, sanctions, consumer protection, and the regulatory relationships that come with it. You'll report directly to the CEO and have a seat at the table when we're making product and market decisions.
What you'll own.
- The entire BSA/AML compliance program, including policies, procedures, and controls
- BSA Officer designation (or oversight of the designated officer)
- KYC/KYB framework and ongoing CDD/EDD processes
- Sanctions screening and OFAC compliance
- Regulatory exam preparation and examiner relationships
- Board and audit committee reporting on compliance risk
- Pre-launch compliance reviews for new products and markets
- Banking partner compliance relationship (if applicable)
What we're looking for.
- 10+ years in financial crime compliance, with at least 3 in a leadership role
- Hands-on experience managing a bank exam or regulatory inquiry
- CAMS certification (required); CGSS or CFE a strong plus
- Experience in fintech, payments, or BaaS environments preferred
- Able to communicate regulatory risk clearly to a non-compliance audience
- Comfortable working in a fast-moving environment where the playbook doesn't always exist yet
Compensation.
Base $[X] - $[Y], depending on experience. Bonus up to [Z]%. Equity. [Benefits summary]. We're transparent about comp from the first conversation.
Two things I'd cut from almost every CCO JD I see: "self-starter" (says nothing) and "fast-paced environment" (implies the company is disorganized). Replace both with one specific sentence about what makes the role genuinely hard.
How to hire a CCO without wasting four months.
The CCO search usually stalls at 2 points: sourcing and closing. On sourcing, the active candidate pool for this role is thin. Most strong CCOs aren't on job boards. They're identifiable through exam records, ACAMS chapter activity, regulatory alumni networks, and referrals from banking partners. That's a different search motion from posting on LinkedIn and waiting.
On closing: CCO candidates do extensive due diligence on the companies they join. They'll ask about open regulatory items, your banking partner stability, board composition, and what happened to the last compliance person. Have honest answers ready. Candidates who find out about skeletons after joining don't stay, and they talk.
We place CCOs and senior compliance leaders at financial crime-focused fintechs. 72-hour shortlists, 12% flat fee, no hire no fee. If you want to see what the candidate pool actually looks like for your specific situation, that's a 30-minute call. See our CCO recruiting page for more on how we run the search.
Frequently asked questions.
The BSA officer is a specific regulatory designation required by FinCEN for covered financial institutions. The CCO is an executive leadership role. At a small fintech, one person often holds both titles. At a larger company, the CCO oversees the BSA officer. The distinction matters because the BSA officer designation carries personal regulatory accountability, and some candidates will specifically ask how that responsibility is structured before accepting an offer.
Title matters less than scope and reporting line. If the person will report to the CEO and own the program independently, call it CCO. If they'll report to the General Counsel and manage a team but not set strategy alone, VP of Compliance is more honest. Mismatched titles create problems at offer stage when candidates realize the role doesn't match what was advertised. Pick the title that reflects the actual authority.
On a self-managed search: 3-6 months from posting to signed offer, sometimes longer. The bottleneck is almost always sourcing, not evaluation. The active candidate pool is small, and the best candidates are passive. A specialist search (which is what we do) typically runs 6-10 weeks from brief to signed offer. We've done faster. The difference is having direct access to the passive market rather than relying on inbound applications.
For a financial crime CCO at a regulated fintech: yes, I'd treat it as a requirement rather than a preference. CAMS signals that the candidate has committed to the discipline enough to sit a rigorous exam. It also matters to regulators and banking partners who review your compliance program. A CCO without CAMS at a payments or BaaS company will face credibility questions in exams. There are exceptions for candidates with very strong track records, but they're exceptions.
Three that I've seen separate strong candidates from well-prepared ones: "Walk me through a time you pushed back on a product launch for compliance reasons and what happened." "How would you assess our current BSA/AML program's biggest gaps in the first 90 days?" And: "Describe how you've managed a banking partner compliance relationship where they had significant concerns about something you were doing." The answers to those three tell you more than a two-hour competency interview.
Rough market range as of 2026: 0.1%-0.4% for a Series B CCO, depending on company valuation, how early the candidate is joining, and whether they're the first compliance hire or stepping into an existing team. Options are more common than RSUs at this stage. Expect standard 4-year vesting with a 1-year cliff. CCOs who join at Series A and stay through a meaningful liquidity event often cite equity as their biggest financial outcome from the role.
Sometimes. A fractional CCO can hold the program together during a search, handle a specific exam cycle, or help a pre-license company build its initial policies. Where fractional breaks down: ongoing regulatory relationships benefit from a consistent named individual, banking partners often want a full-time CCO on file, and building a compliance team culture is very hard to do part-time. Use fractional as a bridge, not a permanent model, if you're operating under a banking license or payment network membership.