Example · Compliance and Risk Manager
Tools now draft the policy updates, rule summaries and committee decks. The call on what the business may do, and the answer to the examiner, still sit with you.
35 of your 40 hours still need you
- 20 stay yours
- 15 faster with AI
- 5 tools could take
A typical week at the middle pace. Your plan uses your own tasks.
Is compliance and risk management safe from AI?
By our task-by-task count, 35 of a typical 40-hour week as a compliance and risk manager still need a person. Tools could already take about 5 hours. Advising the business, managing exams, running investigations and leading the team are the least exposed work you do. About 51% of your week sits there.
Read more
Regulatory change summaries, policy drafts, reports and training are different. Vendors are building agents for exactly this work: Norm Ai, which builds compliance agents for financial institutions, raised a $120M Series C in June 2026.
The bigger question for your seat is how many compliance managers a firm keeps. Standard Chartered said in May 2026 it aims to cut its support-function headcount by more than 15% by 2030. Your plan is to answer the AI headcount question before finance does, and to own the new AI review work that every business line now needs.
The hard truth
Many compliance leaders already wear two hats.
Compliance teams at many investment advisers are small, and their leaders often hold a second job. That is what a flat structure looks like in compliance.
Sources (2)
- 45% of surveyed adviser firms have two to five compliance staff, and about 60% of CCOs hold multiple roles. IAA, ACA Group and Yuter, 2026 compliance testing survey, 2026-07
- The most common pairings were CCO and CFO (19%) and CCO and general counsel (17%); budgets were broadly flat. IAA, ACA Group and Yuter, 2026 compliance testing survey, 2026-07
What stays yours
The yes or no call on what the business may do
A model can list the rules. Someone has to tell a business head no, and answer for it when the examiner asks why.
Regulator exams and audits
Examiners want a person who knows the history, can explain a finding and commits to the fix date.
Investigations of possible violations
Deciding whether something is a violation, and whether it must be reported, is judgment on facts a tool can't fully see.
Escalating and reporting violations
When the facts say report, someone has to carry it to the CCO (chief compliance officer) and the board.
Leading and growing the team
You learn whether an analyst can own a test end to end over months of reviewing their work.
What's the next role for a compliance and risk manager?
Plan A is your best move inside the work you do now. Most sessions in the 13-week plan build toward it.
- A
Senior compliance manager who owns AI review for the firm
Why it fits
Why you. You already advise the business on new products, and AI launches are now the products that need the most review.
The gap. You don't yet have an intake process, risk levels or a record of AI reviews.
The trade-off. You are building the case that one compliance team can do more with tools, which may be used to merge another team into yours.
Other moves that fit
These are also good bets in this field. Read them if Plan A doesn't suit you.
Responsible AI program manager or AI governance manager
Why it fits
Why you. These roles want people who run review programs with legal, risk and model teams. PwC posted an AI Governance Sr. Manager in New York on July 7, 2026 at $119,000 to $299,930, asking for 6 or more years and AI governance, risk, controls, audit or testing experience.
The gap. You have reviewed products, not AI models, and these roles want evidence of an AI program.
The trade-off. Openings are senior and fewer than general compliance roles, and the postings we tracked have already closed. Many people get there by starting as an AI governance analyst.
Chief compliance officer at a smaller firm
Why it fits
Why you. Smaller banks, fintechs and investment advisers hire CCOs from experienced managers. ACA's 2026 survey found 45% of investment managers employ two to five compliance staff.
The gap. You need to have run a whole compliance program, beyond one area.
The trade-off. A small firm's CCO often has no team and wears other hats, and you carry personal accountability.
What's a plan B for risk managers?
Plan B is a job AI is creating that these skills already fit. One session a week in the plan trains you for it, so it is ready if your job shrinks or you want a change.
BPlan B, picked for this role
Responsible AI program manager
You already run reviews that say yes with conditions and answer to examiners, which is how an AI review board and its risk tiers work.
Other options
AI governance analyst
Turning rules into controls and keeping evidence ready for an exam maps straight onto AI inventories, risk ratings and NIST-style controls.
AI auditor
Years of exam and audit evidence give you the habits AI audits need, though this path usually asks for a CISA or similar credential.
In your own plan you can switch to any of the 47 roles.
The first two weeks
The first 2 of 13 weeks. Three sessions a week of 30, 45 and 30 minutes, plus one 40-minute Plan B session. Each session ends with something you can keep, like a list or a number. By week 13 you'll have a one-page capacity plan for your team, an AI intake form with risk levels, and a memo asking to own AI review for the firm.
- Week 1: Measure your week
What you do
- AKeep a time log for one week for you and your team. Sort the hours by the task list on this page.
- AList every report or document your team makes on a schedule. Write down how many hours each takes and who reads it.
- AList every open exam and audit finding. Write the owner and due date next to each one.
- BTake the first half of Anthropic's AI Fluency course, a free online class. Write down the four habits it teaches.
- Week 2: Plan your team's hours
What you do
- AWrite the weekly hours next to each team task from week 1.
- AMark each task a tool could draft while a person checks the result.
- AWrite one page on the hours a tool could free up. Say where those hours would go instead, such as more testing and AI reviews.
- BFinish the AI Fluency course and pass its final quiz.
Three courses from the plan
Checked 2026-10-16.
- AI Fluency: Framework & FoundationsAnthropic Academy · Free
Yes. It is a fast, free baseline for weeks 1 and 2.
- AI Capabilities and LimitationsAnthropic Academy · Free
Yes. It names the failure types you will check for in rule summaries.
- Claude 101Anthropic Academy · Free
Yes, if you have not used an assistant for real drafting yet.
Risks beyond AI: highDelayering and enforcement-cycle risk
Compliance teams get merged when firms chase cost, and they shrink when regulators go quiet. Tools that draft rule summaries and policies make a smaller team easier to argue for, and when two teams merge, one manager seat goes. That outranks the AI risk to the work itself.
Where this could be wrong
- We assumed a regional bank. In healthcare compliance the tasks are similar, but the rules are HIPAA, billing and guidance from the OIG, the health inspector general, and AI review sits closer to clinical teams.
- If compliance agents get good at testing, not just drafting, testing becomes highly exposed and the team-size question gets sharper.
- AI review may move to a separate AI governance or model risk team. If it does, owning AI review shrinks and the AI governance manager path becomes the main one.
- A deregulatory stretch could last longer than we expect, or reverse quickly. We saw the 2025 regulator cuts only in news reports, and we did not check the 2026 to 2027 exam climate.
Also matched: compliance manager, risk and compliance manager, compliance and risk manager. Research checked 2026-10-16. Page updated .