Compliance analyst job description template: the rulebook, the testing work, the credential and the exempt question
On this page
"Compliance analyst: ensure the organization complies with laws and regulations" could describe an analyst testing a bank's mortgage disclosures, an anti-money laundering analyst clearing transaction monitoring alerts, a corporate ethics analyst running the hotline and the annual training, a healthcare compliance analyst auditing claims, or a trade compliance analyst classifying products for export. Each needs a different background, and a candidate from one rarely walks into another at full speed. A useful compliance analyst job description names the rulebook, the kind of work (testing, monitoring, policy, training, investigations), the volume, how findings get escalated, and which credential, if any, matters. Below are the seat types, a copy-ready template, the classification and credential lines with sources, screening and scorecard rows, and common mistakes. For the first call, use the compliance analyst screening questions.
Name the seat: the rulebook and the kind of work
| Seat | What the work looks like | Must-have that separates it |
|---|---|---|
| Regulatory compliance analyst (bank or lender) | Testing loan files and disclosures, reviewing marketing, tracking rule changes, preparing for exams | Has tested consumer banking or lending rules against files and written findings an examiner would accept |
| AML or financial crimes analyst | Alert review, customer due diligence, investigations, escalation for suspicious activity reporting | Has worked alerts or investigations and can explain why they closed or escalated a case |
| Corporate compliance and ethics analyst | Policies, hotline intake, conflicts of interest, gifts, third-party due diligence, training | Has run a program workflow end to end and reported metrics to a compliance committee |
| Healthcare compliance analyst | Coding and billing audits, privacy incidents, policy reviews, education for clinical staff | Has audited claims or privacy incidents and presented findings to clinicians |
| Trade or export compliance analyst | Product classification, screening of parties, license tracking, recordkeeping | Has classified products or screened transactions and kept an audit trail |
Before writing, settle: the program areas and regulators, whether the analyst sits in the first line (the business) or the second line (independent compliance), the systems (case management, monitoring, GRC), expected volume (files tested per quarter, alerts per day), who signs off on findings, and the reporting line. If the job is mostly data work on compliance metrics, compare with the business analyst job description template.
The compliance analyst job description template
[Senior] Compliance Analyst, [Regulatory Compliance / AML /
Corporate Compliance / Healthcare Compliance / Trade Compliance]
[Company], [city, state] — [On-site / Hybrid: days / Remote within:
states]
Pay: $[min]–$[max] per year. [Benefits summary, if required.]
[Exempt or non-exempt, after review.]
SUMMARY
You will [test / monitor / investigate / maintain policies] for
our [program area], covering [named regulations or program
elements]. You will work in our [first-line / second-line]
compliance team, review about [N files a quarter / N alerts a day
/ N cases a month], and report findings to [title / committee].
WHAT YOU WILL DO
- Plan and run [compliance tests / monitoring reviews / audits]:
scope, sample, evidence and written findings.
- [Review and decide alerts or cases, escalating those that meet
our criteria.]
- Track regulatory changes for [area] and draft updates to
policies and procedures.
- Follow findings through remediation and retest.
- Prepare materials for [examinations / audits / committee
reporting].
- [Build and deliver training for (audience).]
YOU MUST HAVE
- [N] years of [compliance / audit / investigations / risk] work in
[industry], with findings you can describe.
- Working knowledge of [named rules or program areas].
- Clear written findings: what was tested, what failed, why it
matters and what fixes it.
NICE TO HAVE
- [CRCM / CCEP / CAMS / other], experience with [systems].
If you meet the must-haves and none of these, please apply.
FIXED CONDITIONS
- [Background check consistent with (regulator / law), conducted
after a conditional offer where required.]
HOW WE HIRE
[Recruiter screen; conversation with (compliance manager); a
written exercise of at most (N) minutes reviewing a sample file or
case we provide; meeting a partner from (the business / audit).]
[EEO STATEMENT]
Need an adjustment to apply or interview? Contact [address].Classification and credential lines, with sources
Not legal advice. The points below were checked against the federal regulations, Department of Labor pages and the credential issuers' sites as of October 2026. State overtime rules can be stricter; confirm classification with counsel and any regulator-specific screening rules for your industry.
Exempt or nonexempt. Legal and regulatory compliance is one of the functional areas the regulations list as directly related to management or general business operations (29 CFR 541.201(b)). The administrative exemption also needs a salary of at least the standard level, which the Department of Labor lists as $684 a week, and a primary duty that includes discretion and independent judgment on matters of significance (DOL Fact Sheet 17C). The regulations say that judgment must be more than skill in applying well-established techniques, procedures or specific standards, and that recommendations can count even when someone else decides (29 CFR 541.202). An analyst who designs tests and recommends fixes fits better than one who clears alerts against a fixed script; review the seat, not the title.
Credentials. Pick the one that matches the program, and list it as preferred unless the seat is senior:
- The CRCM from the American Bankers Association covers consumer banking compliance and requires qualifying U.S.-based compliance experience before the exam.
- The CCEP from the Compliance Certification Board, offered through the Society of Corporate Compliance and Ethics, is a general compliance and ethics credential with a work experience requirement.
- The CAMS from ACAMS covers anti-money laundering; candidates need ACAMS membership and a minimum number of eligibility credits from education, experience and training.
Requirements change; link the issuer's page rather than restating details in the posting. Post the pay range (check pay transparency laws by state) and close with a short EEO statement and an accommodation contact.
From must-haves to screening questions and scorecard rows
| Must-have | Screening question | Scorecard competency | Evidence of a strong answer |
|---|---|---|---|
| Testing | "Walk me through the last compliance test you ran: the rule, the sample, what you found." | Test design and evidence | Names the requirement, explains the sample choice, describes evidence kept |
| Rule knowledge | "Pick a rule you work with often. What do teams most often get wrong about it?" | Regulatory knowledge | Specific requirement, a real failure pattern, a practical control |
| Written findings | "Tell me about a finding the business pushed back on. How did you write it, and what happened?" | Written communication and influence | Clear criteria, condition, cause and effect; held the line or adjusted for a good reason |
| Escalation judgment | "Describe a case you escalated and one you closed that looked similar. What made the difference?" | Judgment | Concrete criteria, documented reasoning, no guessing |
| Remediation follow-through | "How did you make sure a finding was actually fixed?" | Follow-through | Retest, owner, date, evidence of closure |
The later rounds are in the interview guide for finance roles for financial services seats, or the interview guide for legal roles where compliance reports to the general counsel. For a senior hire who will lead the program, adapt the 30-60-90 day plan for compliance officers.
Common mistakes in compliance analyst job descriptions
No rulebook
"Knowledge of applicable regulations" says nothing. Name the program areas; candidates self-select on them.
Mixing first line and second line
An analyst inside the business who fixes processes and an independent tester who reports on them are different jobs with different reporting lines. Say which one this is.
Requiring every credential
Asking for CRCM, CAMS and CCEP together signals that nobody decided what the seat is. Pick one, or none.
Assuming exempt
High-volume alert clearing with fixed criteria needs a real duties review before you pay it as salaried exempt.
Hiding the volume
Alerts per day or files per quarter tells a candidate whether this is analysis or a queue. Give a range.
Before you publish
- The program areas, the line of defense and the kind of work are in the summary.
- Volume and sign-off authority are stated.
- Any credential is matched to the program and marked required or preferred on purpose.
- Classification has been reviewed against the duties test.
- Pay range, EEO statement and an accommodation contact close the posting.
Questions people ask
What should a compliance analyst job description include that most leave out?
The rulebook. Name the regulations or program areas the analyst will work on, such as consumer lending rules, anti-money laundering monitoring, healthcare billing or export controls, and say whether the work is testing, monitoring, policy writing, training or investigations. A compliance analyst at a bank and one at a hospital share a title and little else.
Is a compliance analyst exempt from overtime?
Often, but not automatically. Legal and regulatory compliance is one of the functional areas the administrative exemption regulations list, and the exemption also needs a salary of at least the standard level, which the Department of Labor lists as $684 a week, and discretion and independent judgment on matters of significance. An analyst who clears alerts against a fixed checklist is a weaker fit than one who designs tests and recommends remediation, so review the actual duties and check state law.
Should we require CRCM, CCEP or CAMS?
Match the credential to the program and usually list it as preferred. The ABA's CRCM focuses on consumer banking compliance and has experience requirements, SCCE's CCEP is a general compliance and ethics credential, and ACAMS's CAMS covers anti-money laundering and financial crime. Requiring any of them for an entry-level analyst rules out people who would qualify after a year in the job.
What is a good first screening question for a compliance analyst?
Ask about the last control test or review they ran: what rule it tested, how they picked the sample, what they found and what happened to the finding. Analysts who have done the work describe the sample and the evidence; others describe the policy.