Example · Compliance Analyst
Regulation protects your function. The alert queue is the part AI can take.
24 of your 40 hours still need you
- 13 stay yours
- 11 faster with AI
- 16 tools could take
A typical week at the middle pace. Your plan uses your own tasks.
Is compliance a safe career with AI?
By our task-by-task count, 24 of a typical 40-hour week as a compliance analyst still need a person. Tools could already take about 16 hours. Your job is the clearest test we have run of whether regulation protects a role, and at a broker-dealer the answer is yes, more than for almost any other role we have researched, with one exception that is probably your Monday and Tuesday. Rules from FINRA, the broker-dealer regulator, require a named chief compliance officer on Form BD, the firm's registration form, an AML (anti-money laundering) officer identified to FINRA by name and phone number, a registered principal's written evidence on every communications review, and a CEO's annual signature certifying that the testing happened.
Read more
Regulators have said in writing that none of this changes when the firm buys an AI tool. The function will stay.
The exception is alert review. A surveillance queue has the same shape as a security operations queue, and that shape is among the most exposed in knowledge work. A model reads the same data, applies the same rules and writes the same sentence. Vendors already demo assistants that pre-write the alert disposition, and they read like an analyst on a good day. But everything the rules name sits one level above the queue, and there is a registration you can hold personally that puts your name at that level. This report helps you get there before the next surveillance-vendor renewal.
The hard truth
SEC enforcement dropped sharply, and budgets may follow.
The SEC brought far fewer cases in fiscal 2025, and its enforcement staff shrank. When pressure eases, compliance budgets can ease too.
Sources (2)
- SEC standalone enforcement actions fell from 431 in fiscal 2024 to 303 in fiscal 2025. FTI Consulting analysis of SEC data, 2026-05
- The SEC Enforcement Division's staff declined 18% during fiscal 2025. FTI Consulting analysis of SEC data, 2026-05
What stays yours
Answering "can I do this?" in twenty minutes
This rests on context. Whether a rep's outside business activity conflicts depends on the branch, the client base, the rep's history and things the CCO (chief compliance officer) said years ago. None of that is in a policy document. The reps call you because you carry it.
Knowing every disclosure question on the U4, the rep registration form
The legal accountability here belongs to the firm and its principals. A wrong Form U4 is a filing the firm signed, and FINRA fines firms and individuals for late or inaccurate disclosures. A model can draft the amendment, but a principal has to be willing to submit it. You are the person the principal trusts to get it right.
Escalating a top producer's trade to the CCO
This needs accountability and presence. Telling a producer his trade is going to the CCO is a decision someone has to own, face to face. While the authority behind it is personal, "are you even licensed?" lands. Getting registered changes the answer to "yes, and this review is mine under the WSPs."
Drafting SAR (suspicious activity report) narratives for the AML officer
This needs careful checking, and the law names who is accountable. A SAR must be filed within 30 calendar days of initial detection (31 CFR 1023.320), its existence may not be disclosed to anyone, and the supporting record is kept five years. Someone has to decide, and FinCEN's own proposed rule concedes that monitoring systems "generate a significant number of alerts that are not necessarily indicative of suspicious activity." The decision holds up, but writing the narrative is more exposed.
Being the person examiners get handed to
This depends on context. When FINRA's request letter asks for "all exception reports for the period," knowing which reports they mean and which one was renamed last year is in no system. You and the testing lead carry it.
What's next for a compliance analyst?
Plan A is your best move inside the work you do now. Most sessions in the 13-week plan build toward it.
- A
Get registered and get your name in the procedures
Why it fits
Why you. You likely already do reviews that Rule 3110(b)(4) says must be "conducted by a registered principal and must be evidenced in writing," under someone else's registration. If you have passed the SIE, the entry-level securities exam, Rule 1210.02 lets the firm register you permissively, without waiting for a vacancy.
The gap. You have no principal registration. The WSPs (written supervisory procedures) name your manager for every review you actually perform. You have no Regulatory Element obligation yet, which hints that the system does not know you exist.
The trade-off. Held accountability stays with you. FINRA's March 2024 Sanction Guidelines put individual failure-to-supervise at a fine of $5,000 to $30,000 and suspension in principal capacities for up to two months, or, with aggravating factors, up to two years or a bar. Your Form U4 is public on BrokerCheck for the rest of your career. You are volunteering to be the person the escalation is about, permanently, in exchange for the authority that makes the call survivable. The firm may decline to sponsor, and the license comes with no raise.
Other moves that fit
These are also good bets in this field. Read them if Plan A doesn't suit you.
Own the model's error rate
Why it fits
Why you. If you've seen a vendor assistant's output and couldn't answer whether you could explain it to an examiner, and you built the lexicon exclusions, you are the person closest to the answer. Usually nobody samples below the vendor's scoring threshold.
The gap. There is no below-the-line sample. The vendor owns the thresholds. There is no model inventory and nothing that maps the assistant to the items in Notice 24-09.
The trade-off. You would be building the evidence that lets the firm switch the assistant on, which shrinks the queue part of your week and any temporary cover's entire job. It is desk work. Its output makes the registration ask credible, which is why it is second.
The AML investigations side, as the AML officer's named delegate
Why it fits
Why you. If you already draft narratives and know the accounts, you are most of the way there; Rule 3310(d) allows "an individual or individuals" to be designated.
The gap. You have likely never owned a SAR decision, only the draft. CAMS, the credential the market expects here, is a US$2,095 package plus ACAMS membership.
The trade-off. Narrative drafting is where language models are strongest, and Hawk already sells an agent for the investigation step. The step you are climbing to is being contested from below. It holds at the decision rather than the draft, and the decision is the officer's until she lends it.
What's a plan B for compliance analysts?
Plan B is a job AI is creating that these skills already fit. One session a week in the plan trains you for it, so it is ready if your job shrinks or you want a change.
BPlan B, picked for this role
AI governance analyst
Answering "can I do this?" in twenty minutes is the daily core of AI governance, and your compliance years meet the entry bar.
Other options
AI evaluation specialist
Knowing which lexicon hits are just the soccer game is how you measure a surveillance model's error rate and improve it.
AI auditor
Facing examiners prepares you for audit work; this path usually needs a CISA or similar credential first.
In your own plan you can switch to any of the 47 roles.
The first two weeks
The first 2 of 13 weeks. Most weeks have three sessions of 30 and 60 minutes on weekdays and 90 minutes on the weekend, plus one 40-minute Plan B session. Week 12 has two main sessions. If an exam request comes in, make the exam your plan and ask to draft the response. If the firm says no to sponsorship in week 2, use the plan to build proof you can take to another firm. By week 13 you'll have a measured miss rate for the AI alert assistant, a one-page answer to what an examiner would ask about it, and a Series 14 result with a memo asking to be named in the procedures.
- Week 1: Measure your week
What you do
- ATrack your time for one week against the 14 tasks in this report. Write down the hours each one takes.
- ARead FINRA Regulatory Notice 24-09 and the Gen AI section of the 2026 Oversight Report. Write one page listing what FINRA says a firm's policies must cover for an AI supervision tool.
- APull 90 days of alerts with the vendor's risk score. Count how many scored below the threshold and were never opened.
- BTake the first half of AI Fluency: Framework and Foundations, Anthropic's free course. Use a public FINRA notice as your practice text.
- Week 2: Ask for sponsorship
What you do
- AAsk the CCO in writing to sponsor you for the Series 14, FINRA's compliance officer exam, under Rule 1210.02 (permissive registration). Include the $350 fee and a target window.
- ADesign a weekly sample of 40 alerts that scored below the threshold or that the AI assistant closed, spread across score bands. Use five columns: alert, system verdict, your verdict, why, and threshold to change.
- AReview your first 40 sampled alerts.
- BFinish AI Fluency and its final assessment.
Three courses from the plan
Checked 2026-09-22.
- FINRA Rules 3110, 3120, 3130, 3310, 1210, 1220, 1240FINRA · Free
Yes, Weeks 1 and 3. Read the rules themselves, since you will be quoting section numbers on a phone call.
- Regulatory Notice 24-09, FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language ModelsFINRA, June 27, 2024 · Free
Yes, Week 1. It is the examiner's checklist for your vendor's assistant.
- 2026 FINRA Annual Regulatory Oversight Report, "GenAI: Continuing and Emerging Trends" and AML sectionsFINRA, December 9, 2025 · Free
Yes, Week 1. The "human-in-the-loop" language is “Own the model's error rate”'s mandate.
Risks beyond AI: moderateDeal and enforcement-cycle risk
Headcount also moves for reasons unrelated to AI. Mid-size broker-dealers are acquisition targets, and one merger closes a compliance department. Enforcement climate swings with administrations, and a quieter SEC means a smaller build. Regulation helps, but it does not rise in a straight line.
Where this could be wrong
- The firm may not sponsor a permissive registration. Some CCOs keep principal registrations scarce because each one is a person FINRA can name. If the Week 2 answer is no, the ending flips to portable evidence.
- The Series 14 may be the wrong exam for your firm. Rule 1220 defines the Compliance Officer category around the CCO on Form BD; some firms prefer the Series 24 route, which means the Series 7 first, a year rather than a quarter. Confirm before you book.
- You may be at a bank, not a broker-dealer. Then the OCC and the CRCM come back and the credential decline is wrong.
- Your sample of alerts the system scored too low to flag may find nothing. Then the error-rate move loses its number and the memo stands on the license and the one-pager. That is good for the firm but weaker for the plan.
Also matched: compliance analyst, compliance officer, aml analyst. Research checked 2026-09-22. Page updated .