Create for free Login

Compliance Officer Resume 2026 - regulations, risk assessments and exam sample free

Антон Литвинов
Антон Литвинов Founder, AI Resume Master
in 𝕏
Published: 03.10.2026 Updated: 03.10.2026

Compliance is not one profession, and the single biggest reason a compliance resume fails is that it refuses to say which one it is. Bank Secrecy Act and anti-money laundering work, consumer compliance in a lender, broker-dealer supervision under FINRA rules, investment adviser compliance under the Advisers Act, healthcare compliance under HIPAA and the federal fraud and abuse laws, and corporate ethics and global trade compliance all carry the same job title and share almost no vocabulary. A hiring manager in one lane reads a lane-less resume as somebody who has done a little of everything and can be trusted with none of it. So pick the lane in the first line, then prove it the way the function proves anything: named regulations, a risk assessment methodology, control testing with sample sizes, issues opened and closed, filings made, and what happened the last time an examiner or an auditor walked in. Compliance is a documentation profession. A resume that cannot document its own claims is making the argument against itself.

Create resume → See the example 5 minutes - AI suggestions - ATS friendly
Ready sample

Compliance officer resume sample

The order a compliance hiring manager reads: lane and regulatory scope, credentials, program ownership, testing and issue numbers, then regulatory examination history. Nothing abstract survives past the second line.

Lane declared immediately

BSA and AML, consumer compliance, broker-dealer, adviser, healthcare or corporate. The regulations you name in the first three lines tell the reader which compliance profession you belong to, and that decision is made before anything else is read.

Program ownership, not participation

Did you own the risk assessment, write the policy, tune the monitoring scenarios, sign the filings, or sit in the room while someone else did. State the verb honestly and the scope precisely: entity size, number of branches, product lines covered, alert volume.

Testing and issues in numbers

Reviews completed, sample sizes, findings raised by severity, issues remediated and closed on time, training completion rates, filings made. Compliance is measurable work and a resume without those numbers reads like a job description.

ATS friendly

Write every regulation the way postings write it - 'Regulation Z (TILA)', 'Bank Secrecy Act (BSA)' - and every credential spelled out and abbreviated, because parsers match literal strings and a posting may use either form. Single column, standard headings, MM/YYYY dates, no tables, no photo.

Sample resume text

Use it as a reference: keep the structure and wording, put in your own facts and numbers.

Rachel Nwosu

BSA/AML Compliance Officer (CAMS, CRCM)
Columbus, OH
rachel.nwosu@example.com
(614) 555-0192
linkedin.com/in/example

Profile

BSA and AML Compliance Officer with 7 years in financial crimes compliance, currently for a 1.8bn asset community bank with 22 branches and a small money services business portfolio. Own the annual BSA risk assessment, the CIP, CDD and EDD program, OFAC screening governance and transaction monitoring tuning in Verafin. Filed or reviewed 310 SARs and approximately 1,400 CTRs a year. Reduced monitoring false positives 38% across two documented tuning cycles with below-the-line testing and no loss of productive alerts. Managed the most recent BSA examination and annual independent test with no matters requiring attention. Certified Anti-Money Laundering Specialist (CAMS) and Certified Regulatory Compliance Manager (CRCM).

Experience

BSA/AML Compliance Officer05/2022 - present

Scioto Valley Community Bank, Columbus, OH

  • Own the BSA and AML program for a 1.8bn asset bank with 22 branches, reporting to the Chief Risk Officer and presenting quarterly to the board audit and risk committee
  • Author the annual BSA risk assessment covering 14 product lines and 6 higher-risk customer categories, with documented inherent risk scoring, control effectiveness evidence and residual risk ratings that drive the monitoring scenario set
  • Decision an average of 420 monitoring alerts a month in Verafin with two analysts, filing 310 SARs and approximately 1,400 CTRs a year, and completing 314(a) searches within the required cycle with no late responses in three years
  • Ran two tuning cycles with segmentation analysis and below-the-line sampling, reducing false positives 38% with a documented lookback confirming no productive alerts were lost; evidence package accepted by the model validation reviewer without exception
  • Rebuilt the EDD program for money services business and cash-intensive customers, raising annual review completion from 71% to 100% on time across 140 relationships
  • Managed the most recent BSA examination and the annual independent test with no matters requiring attention, and closed all 7 prior-period enhancement items ahead of committed dates
  • Deliver annual BSA, OFAC and fraud awareness training to 240 staff with 100% completion and a documented knowledge check pass rate above 95%
Senior BSA Analyst08/2019 - 04/2022

Buckeye Heartland Credit Union, Dublin, OH

  • Worked an average of 300 alerts a month and prepared SAR recommendation packages for the BSA Officer, with 96% accepted without rework
  • Performed OFAC potential match review and reduced false positive volume by refining name-matching thresholds and documenting a tiered escalation procedure
  • Conducted CIP and beneficial ownership quality control reviews on 60 new business accounts a quarter, raising 11 findings on documentation gaps that were closed through branch retraining
  • Supported two regulatory examinations as the primary file and data preparer, delivering all requested items within 48 hours
Branch Operations Supervisor06/2017 - 07/2019

Olentangy Savings Bank, Columbus, OH

  • Supervised seven staff, reviewed daily CTR triggers and large cash activity, and escalated structuring patterns to the BSA department
  • Enforced CIP documentation standards on new accounts and resolved exceptions before the monthly operations review

Education

The Ohio State University2013 - 2017

Bachelor of Science, Finance

Skills

Bank Secrecy Act (BSA) and anti-money laundering program ownershipCustomer Identification Program (CIP), CDD, EDD and beneficial ownershipSAR and CTR decisioning, narrative writing and FinCEN e-filing314(a) searches and 314(b) information sharingOFAC sanctions screening, list management and match escalationTransaction monitoring tuning in Verafin; Actimize and LexisNexis BridgerBSA risk assessment: inherent risk, control effectiveness, residual riskConsumer compliance: UDAAP, Regulation E, Regulation CC, GLBA, FCRAExamination and independent test management, issue remediation and validationPolicy lifecycle, attestation and regulatory change management

Certifications and Training

  • Certified Anti-Money Laundering Specialist (CAMS), ACAMS - 2020
  • Certified Regulatory Compliance Manager (CRCM), American Bankers Association - 2023
  • Certified Fraud Examiner (CFE) - exam in progress, scheduled 2026
  • Sanctions compliance and OFAC screening workshop - 2024
  • Transaction monitoring tuning and model risk fundamentals - 2023

Download a resume template

Build your resume in our AI builder and export in the format you need

PDF
Classic Build
PDF
Modern Build
PDF
ATS friendly Build
Use this template in the builder →

What you get

  • A complete compliance officer resume sample
  • 3 PDF templates
  • How to name regulations and credentials so parsers match them
  • 6 mistakes that keep compliance resumes out of interviews
Profile

Compliance officer profile summary

Four lines: your lane, the size and type of institution, the specific program areas you owned, your credentials, and one piece of regulatory outcome evidence - a clean examination, a closed matter requiring attention, a remediation you ran. The reader is trying to establish whether you have carried accountability or supported someone who did.

If you are moving between lanes, name the transferable core and be honest about what is new. Risk assessment methodology, control design and testing, issue management, policy lifecycle, regulatory change tracking and examination management transfer across every lane. The substantive rules do not. A credible career changer says so and shows the study they have already done.

WeakDetail-oriented compliance professional with strong knowledge of banking regulations and a proven track record of ensuring compliance with all applicable laws. Excellent communication skills and ability to work cross-functionally in a fast-paced regulatory environment.
StrongBSA and AML Compliance Officer for a 1.8bn asset community bank, 22 branches, 7 years in financial crimes compliance. Own the annual BSA risk assessment, the CDD and EDD program, OFAC screening governance and transaction monitoring tuning in Verafin. Filed or reviewed 310 SARs and approximately 1,400 CTRs a year; cut monitoring false positives 38% over two tuning cycles with documented above-the-line and below-the-line testing. Managed the 2024 BSA examination with no matters requiring attention. Certified Anti-Money Laundering Specialist (CAMS) and Certified Regulatory Compliance Manager (CRCM).
Tip
Put institution size and structure in the summary - asset size, branch count, product lines, or for a broker-dealer the number of registered representatives and branch offices. Compliance programs scale non-linearly and the reader cannot judge your work without the denominator.
Skills

Compliance officer skills for a resume

List the regulations you have actually worked inside, not the ones you have heard of, and name the systems exactly. Group them by lane so the reader can see a coherent specialization rather than a keyword pile, and write the common abbreviation next to the full name so either form matches.

Hard skills

  • Bank Secrecy Act (BSA) and anti-money laundering program pillars: internal controls, designated officer, training, independent testing and customer due diligence
  • Customer Identification Program (CIP), customer due diligence (CDD), enhanced due diligence (EDD) and beneficial ownership collection and verification
  • Suspicious Activity Report (SAR) and Currency Transaction Report (CTR) decisioning, narrative writing and FinCEN e-filing, plus 314(a) searches and 314(b) information sharing
  • Office of Foreign Assets Control (OFAC) sanctions screening, list management, false positive tuning and escalation of potential matches
  • Transaction monitoring scenario design, threshold tuning with above-the-line and below-the-line testing, and model validation support - Actimize, Verafin, Mantas, Fircosoft, LexisNexis Bridger
  • Consumer compliance: UDAAP, Regulation B (ECOA), Regulation Z (TILA), Regulation E, Regulation DD, Regulation CC, HMDA LAR data integrity scrubbing, CRA, fair lending analysis, FCRA, SCRA, GLBA privacy and TCPA
  • Securities supervision: FINRA Rule 3110 supervisory system, branch office examinations, advertising and communications review under FINRA Rule 2210, annual compliance meeting, and Advisers Act Rule 206(4)-7 annual review, code of ethics and Form ADV
  • Healthcare compliance: HIPAA Privacy and Security Rules, breach risk assessment and notification, OIG and GSA exclusion screening, Stark Law and the Anti-Kickback Statute, False Claims Act exposure and the seven elements of an effective compliance program
  • Risk assessment methodology with inherent risk, control effectiveness and residual risk ratings, the three lines of defense model, and control testing with documented sampling
  • Issue management and remediation tracking, policy lifecycle and attestation, regulatory change management, examination and audit response, and hotline case management in NAVEX or Convercent

Soft skills

  • Telling a revenue-producing business line no, in writing, with the rule cited
  • Writing a SAR narrative or an issue finding that an examiner can follow without asking a question
  • Sitting in an examination interview and answering only what was asked
  • Escalating to the board or audit committee at the right level of detail
  • Running a remediation that touches four departments without becoming the bottleneck
  • Distinguishing a regulatory requirement from an internal preference, and saying which is which
  • Keeping a hotline investigation confidential when everyone wants to know
  • Training people who think the training is a waste of their morning
  • Reading a new rule and translating it into the three controls it actually changes
  • Documenting a judgment call so the reasoning survives after you leave
Experience

How to write compliance experience

Formula: scope plus the control you owned plus the volume plus the outcome. 'Ensured compliance with applicable laws and regulations' is the posting read back. What the reader wants is which program you owned, across how large an institution, how much work ran through it, and what a third party said about it - an examiner, an internal auditor, an independent testing firm.

Be specific about accountability verbs. Owned, authored, tuned, filed, tested, remediated and presented to the board are all different from supported and assisted. Use the honest one. Then attach the number: alerts worked per month, reviews per quarter, sample sizes, findings by severity, issues closed on time, training completion, filings made, and days to remediate.

Weak- Responsible for BSA/AML compliance, monitoring transactions for suspicious activity, filing reports, and assisting with regulatory examinations and audits.
Strong- Owned the BSA and AML program for a 1.8bn asset bank with 22 branches: authored the annual risk assessment covering 14 product lines and 6 higher-risk customer categories, decisioned an average of 420 monitoring alerts a month in Verafin, filed 310 SARs and approximately 1,400 CTRs a year, completed two tuning cycles with documented below-the-line testing that reduced false positives 38% without a single missed productive alert in the lookback, and managed the 2024 BSA examination and the annual independent test with no matters requiring attention.
What to include
Institution size and structure - program areas owned - named regulations - alert or review volume - sample sizes and findings by severity - filings made - issues closed on time - examination and audit outcomes - training completion rate - systems named exactly.
Education

Credentials, licenses and education

Compliance has no single license, which is exactly why credentials carry weight: they are the only standardized proof in a field where every institution's program looks different. Write each one spelled out with the abbreviation in parentheses, because a posting may search for either string and a parser matches literally. For broker-dealer and adviser roles the registrations are not optional decoration - they are the legal basis for holding the role, and they belong near the top with the dates.

  • Certified Anti-Money Laundering Specialist (CAMS) from ACAMS, with the year certified
  • Certified Regulatory Compliance Manager (CRCM) from the American Bankers Association, for banking consumer compliance roles
  • Certified Compliance and Ethics Professional (CCEP) or Certified in Healthcare Compliance (CHC) for corporate and healthcare lanes
  • Certified Fraud Examiner (CFE) and Certified Information Privacy Professional (CIPP) where fraud or privacy is part of the remit
  • FINRA registrations with dates: Securities Industry Essentials (SIE), Series 7, Series 24 General Securities Principal, Series 14 Compliance Official, Series 63, Series 65 or 66
  • Degree in one line - finance, accounting, business, criminal justice or political science all read naturally; a JD is worth naming and so is bar admission if you hold it
  • Regulator or examiner background, if you have one, stated plainly as a line of its own - it is one of the strongest signals in this profession
  • Specific training with the year: sanctions, fair lending analysis, HMDA data integrity, model validation, HIPAA security risk analysis
Careful
Never name an examination finding, a consent order, a SAR subject, a hotline case or a customer on a resume. SAR existence is confidential by law, and the fastest way to fail a compliance interview is to show that you will talk about a filing.
No experience

Compliance resume with no compliance title yet

Most compliance officers did not start in compliance. They came from the teller line, from loan operations, from underwriting, from internal audit, from a registered representative role, from nursing or health information management, from law or from law enforcement. The function is built on three skills - reading a rule precisely, testing whether a process matches it, and documenting the gap - and those are learnable in almost any operational job.

So write the resume around the control work you already did without calling it compliance. Did you verify identification and documentation. Did you run a quality control review of someone else's files. Did you reconcile data before it was reported. Did you refuse a transaction on policy grounds and write it up. Did you respond to an audit request. All of that is compliance experience described in operational words, and the translation is yours to make rather than the reader's.

  • Control work from any role: file reviews completed, error rates found, documentation standards enforced, exceptions escalated
  • Regulatory exposure you have already had: annual BSA and AML training, HIPAA training, FCRA or fair lending modules, with years
  • Data integrity work: reports you scrubbed or reconciled before submission, and the volume of records
  • Credential progress - CAMS or CRCM study in progress with an exam date, or SIE passed, stated honestly as in progress
  • Audit or examination support you provided, described as the request type and the turnaround, never the finding

Ready to write your compliance officer resume?

The builder keeps your regulations, credentials and testing numbers in the order a compliance hiring manager reads them, in a layout screening systems can parse.

Create resume → See examples
Mistakes

Common mistakes

No lane

A resume that mixes BSA and AML with HIPAA, FINRA rules and export controls reads as somebody who skimmed every lane. Pick the one you are applying into, lead with it, and keep the others in a short earlier-career section if they are real.

Regulations as a keyword wall

Twenty regulation names in a row with nothing attached proves only that you can type them. Attach each cluster to work: 'Regulation Z (TILA) - reviewed 240 closing disclosures a quarter and raised 9 findings on fee tolerance cures'. One documented regulation beats ten listed.

Support work written as ownership

Compliance hiring managers probe this in the first interview. If you worked alerts but did not decision SARs, say so. If you tested controls but did not write the risk assessment, say that. An inflated verb that collapses under one question costs more than the smaller honest claim ever would.

No institution size anywhere

A program at a 300m asset bank with four branches and a program at a 40bn bank are different jobs with the same title. Without asset size, branch or representative count, product lines or patient volume, the reader cannot calibrate anything you wrote.

Examination and audit history missing

The outcome of the last examination or independent test is the closest thing compliance has to a performance review. Leaving it out invites the assumption that it went badly. State the outcome at a safe level of generality - no findings, findings remediated within the period, program enhancements completed - and never name the regulator's words.

Confidential material used as evidence

Referencing a specific SAR, a named consent order you worked under, a hotline case or an identified customer is disqualifying. SAR confidentiality is statutory. Describe the type of work and the volume, and keep every example generic.

Takeaways

Takeaways

Remember

  • Declare the lane in the first line
  • Institution size, structure and product scope
  • Regulations named as postings name them, with work attached
  • Volumes: alerts, reviews, sample sizes, findings, filings
  • Credentials spelled out and abbreviated, with years
  • Examination and audit outcomes, kept generic and confidential
Create resume →
FAQ

Frequently asked questions

Pick the lane of the role you are applying for and reorganize, not rewrite. Put the matching program areas in the summary and the top two jobs, and compress the rest into shorter bullets lower down. Mixed experience is genuinely valuable in smaller institutions where one officer covers BSA, consumer compliance and vendor management, so for those roles say exactly that - a multi-disciplinary program at a named asset size - which is a lane of its own rather than an absence of one.
It depends entirely on the lane. CAMS is the common currency in financial crimes and AML roles. CRCM is the recognized credential for US banking consumer compliance. CCEP and CHC carry the weight in corporate ethics and healthcare respectively, and CIPP matters where privacy is a real part of the remit. For broker-dealer and adviser roles the FINRA registrations, especially the Series 24 and the Series 14, do more than any certification. Write them spelled out with the abbreviation, because postings use both forms.
Describe volume, process and quality, never content. Alerts decisioned per month, cases escalated, filings made in a year, narrative quality feedback from independent testing, and the typologies you worked at a category level such as structuring, funnel accounts or elder exploitation. Never identify a subject, never say a filing led to an enforcement outcome, and never imply you can discuss a specific report. The discipline you show here is itself a hiring signal.
They mean you can build and defend one, not that you have read one. Show the method: the risk categories and products covered, how inherent risk was scored, how control effectiveness was evaluated and evidenced, how residual risk was rated, and what changed in the program as a result. Say how often it was refreshed, who approved it, and whether it survived independent testing or examination review. That is the difference between owning the assessment and filling in a template.
Yes, carefully, because remediation experience is one of the most sought-after things in compliance. Describe it structurally rather than specifically: that you managed a remediation program across a stated number of workstreams, built the issue tracking and validation evidence, and closed items within the committed timeline. Do not name the regulator's findings, quote supervisory language or identify the institution's supervisory status beyond what is already public.
With the mechanics. Name the platform exactly, state the scenario count or the alert volume you worked with, and describe the tuning cycle: segmentation, above-the-line and below-the-line sampling, the statistical basis for a threshold change, documentation of the rationale, and validation afterwards. A false positive reduction figure is only credible when paired with evidence that productive alerts were not lost, so give both numbers. Model validation support, if you had it, belongs in the same sentence.
It helps in some lanes and is close to neutral in others. For corporate ethics, healthcare fraud and abuse, sanctions and regulatory advisory work, a JD and bar admission are a real advantage and should be near the top. For BSA operations, consumer compliance testing and broker-dealer supervision, the practical program credentials and the hands-on volume usually weigh more. If you hold a JD and are applying to an operational role, lead with the program work and put the degree where it belongs rather than framing yourself as a lawyer.
Yes - the complete sample above, and the templates on this page. You can assemble your own version in the builder for free and see the finished layout; downloading the PDF is paid, by subscription or one-time payment. The templates stay single-column with standard headings so that regulation names and credential strings parse intact, which matters because compliance postings are often screened on exactly those strings.
Useful reading

Resume and interview advice

Tips

How to Tailor a Resume to a Job Description in 10 Minutes

A step-by-step routine with a time budget: how to customize your resume for a specific job in 10 minutes, use keywords from the posting and invent nothing. With a before-and-after example for a B2B sales role.

Read → ATS

What Is an ATS System? Applicant Tracking Explained

How recruiters work with applications inside an applicant tracking system, whether a "robot" really rejects your resume, and what to do so your resume gets found.

Read → AI

AI Resume Builder in Claude and ChatGPT via MCP

Create a resume with AI in a normal conversation with Claude or ChatGPT, and get a real document with a template, layout and PDF instead of a wall of text in the chat.

Read →
Related Professions

Resume examples for other roles

→

Auditor
→

Credit Analyst
→

Claims Adjuster
→

Paralegal
Create resume →