What Makes a Strong Head of Compliance or MLRO?

Compliance leadership is often recruited as though the objective were to find the most cautious person available. That produces someone who can say no, but not someone who can help a regulated business grow safely. The stronger profile is rarer: a leader who understands the commercial model, holds the line where it matters, and is trusted by both the board and the regulator.

Essential versus preferred

The essentials are non-negotiable:

• Direct experience of the relevant regulatory regime, not a neighbouring one.
• The credibility to hold approved-person responsibilities, or the standing to earn them.
• A track record of building monitoring, surveillance and reporting that actually work.
• The judgement to distinguish a real risk from a theoretical one, and to act accordingly.

The preferences matter less than clients think: a particular regulator, a particular platform, a particular product. Useful signals, but not requirements.

The test of a good compliance leader

Ask a candidate to describe a time they disagreed with the business and how it was resolved. The answer tells you almost everything. The weak leader either backed down or escalated destructively. The strong leader built the case, found the decision-makers, and created a solution the business could live with — and can explain the trade-off plainly.

Then ask how they measure the effectiveness of a compliance function. The best answers are about outcomes — fewer incidents, faster resolution, cleaner reporting, a stronger relationship with the regulator — not about the number of policies written.

The relationship with the CEO

A Head of Compliance who is not close to the CEO will be marginalised. A Head of Compliance who says yes too often will not be. The appointment only works when the chief executive genuinely wants a partner in the role, not a shield. If the client is hiring compliance to protect them from a problem they would rather not fix, no candidate will succeed.

What to define before the search

Decide whether the role is primarily advisory, primarily oversight, or a blend — and be honest about the authority that comes with it. Decide whether the holder will sit on the executive committee, and what their reporting line actually is. Decide which jurisdictions they must own personally and which can be covered by the team.

A compliance search is not about finding the strictest CV. It is about finding the person who can keep a regulated business both safe and moving — and that is a commercial skill as much as a regulatory one.