6 free templates by industry and stage. Download as DOCX or copy-paste.
The compliance officer job description gets written in two very different situations. One is a large, regulated company adding to an established compliance team. The other, far more common than people expect, is a small business in a regulated industry that has just realized it is legally required to have one. The templates online are written for the first situation and quietly fail the second.
At FirstHR, we build for small businesses that hire without an HR department, and compliance is a place where that gap really bites: a healthcare practice handling patient data or a community bank is required to designate a compliance officer no matter how small it is. The six templates below cover the situations companies actually hire for: general, healthcare HIPAA, BSA/AML, HR compliance, a small-business first hire, and chief compliance officer. Fill in the brackets and post.
TL;DR
Six free compliance officer job description templates: General, Healthcare / HIPAA, BSA / AML, HR Compliance, First Compliance Hire (SMB), and Chief Compliance Officer. Download all six as one DOCX. A compliance officer keeps a company within its legal and regulatory obligations. Many regulated small businesses are required to designate one even at 10 to 50 employees.
What Does a Compliance Officer Do?
A compliance officer makes sure a company meets the legal and regulatory requirements that apply to its industry. The federal occupational profile for compliance officers captures the core work: examining, evaluating, and ensuring conformity with laws, regulations, and internal policies.
For the employer writing the posting, two facts shape everything. First, the role is intensely industry-dependent: a healthcare compliance officer, a banking BSA officer, and an HR compliance officer live in completely different regulations. Second, it is not only a big-company role, since regulated small businesses are often required to designate one regardless of size. The six templates on this page split by industry and stage, and the page starts by helping you figure out whether you are required to have the role at all.
Does a Small Business Need a Compliance Officer?
Often, in a regulated industry, the answer is yes by law, regardless of headcount. This surprises many small business owners who assume compliance is a Fortune 500 concern. Several industries require a designated compliance officer at any size.
In healthcare, HIPAA requires a covered entity to designate both a privacy official and a security official, and a practice handling protected health information is a covered entity even with a handful of employees (see 45 CFR 164.530 for the privacy official and 45 CFR 164.308 for the security official). In banking, a community bank or credit union must designate a BSA officer to run its anti-money-laundering program. Broker-dealers, government contractors, cannabis businesses, and companies pursuing SOC 2 face similar requirements or strong contractual pressure. If one of those is you, the practical question is who and at what scope, and the healthcare, financial, and first-hire templates here are written for exactly that.
Compliance Officer Duties and Responsibilities
Compliance officer duties and responsibilities center on policy and standards, monitoring and audits, training and culture, and the documentation and reporting that keep the organization audit-ready. The industry shifts the emphasis, HIPAA for healthcare, AML for banking, employment law for HR, but the four categories hold across nearly every compliance role. These are the duties grouped the way the templates use them.
Policy and standards
Develop and maintain compliance policies
Keep policies current with regulation
Own the code of conduct and handbook
Monitoring and audits
Monitor relevant laws and regulations
Conduct internal audits and risk assessments
Investigate issues and corrective action
Training and culture
Build and deliver compliance training
Track completion and acknowledgments
Promote a culture of compliance
Documentation and reporting
Maintain audit-ready records
Report status and risks to leadership
Manage vendor and third-party compliance
A strong posting grounds these in your specifics: the regulations that apply, the certifications you need, the reporting line, and the seniority.
Compliance Officer Types Compared
The compliance officer title spans different jobs by industry and seniority, and naming the right one in the posting screens for the right skills and certifications. This is how the variations differ.
Factor
Healthcare
BSA / AML
HR
First hire
Main focus
HIPAA privacy/security
Anti-money-laundering
Employment law
Build the program
Key regulations
HIPAA rules
BSA, OFAC, PATRIOT Act
FLSA, EEO, OSHA
Industry-dependent
Common certification
CHC, CHPC
CAMS, CRCM
SHRM-CP, PHR
Any relevant
Reports to
Administrator
Board
HR director
Founder
Typical employer
Clinic or practice
Bank or fintech
Growing company
Regulated SMB
The practical takeaway: match the template to your industry and stage.
Which Template Should You Use?
Pick the template by your industry first, then your stage. All six share the same skeleton, but the matched version screens for the right regulations, certifications, and seniority. Use this guide to choose.
General Compliance Officer
Industry-neutral baseline
The universal version: policy development, audits, training, regulatory monitoring, investigations, and reporting. Start here for a general compliance role.
Healthcare (HIPAA)
Clinics and practices
The healthcare version: combined Privacy and Security Officer scope, HIPAA rules, risk assessments, and BAAs, for organizations of any size that handle health data.
BSA / AML (Financial)
Banks, credit unions, fintech
The financial version: the designated BSA Officer role, AML program, SAR and CTR filing, and OFAC screening for regulated financial institutions.
HR Compliance Officer
Employment law
The HR version: FLSA, FMLA, ADA, EEO, OSHA, I-9, and multi-state wage and pay-transparency compliance, plus the employee handbook and investigations.
First Compliance Hire (SMB)
Small business, build-from-scratch
The small-business version: a blended, hands-on role that builds the program from scratch and reports to the founder. The variation no competitor template offers.
Chief Compliance Officer
Scaling companies
The leadership version: enterprise compliance strategy, team leadership, and board reporting for a company scaling its compliance function.
Industry First, Then Stage
Two questions pick the template. First, what regulation drives the role? Healthcare for HIPAA, BSA/AML for banking and fintech, HR for employment law, or General if it is broad operational compliance. Second, what stage are you? The First Compliance Hire template fits a small company building the program from scratch; Chief Compliance Officer fits a scaling company with a team and board reporting. Customize the responsibilities, certifications, and reporting line from there.
Download all six as a single Word document or copy individual templates. Each follows the same structure: company context, position summary, key responsibilities, required and preferred qualifications, and compensation and how to apply. Fill in the brackets before you post.
Download All 6 Job Description Templates
General, healthcare, BSA/AML, HR, first hire, and CCO. All in one DOCX.
Template 1: General Compliance Officer
The universal version: policy development, audits, training, regulatory monitoring, investigations, and reporting. Start here for a general compliance role.
Compliance Officer Job Description (General)
COMPLIANCE OFFICER JOB DESCRIPTION
Company: __ ([City, State])
Reports to: [CEO / COO / Audit Committee]
Employment type: [ ] Full-time [ ] Part-time
FLSA status: Exempt
ABOUT [COMPANY NAME]
[One or two sentences: what your company does, your industry, and the
regulatory environment the role operates in.]
POSITION SUMMARY
[Company Name] is hiring a Compliance Officer to make sure the company
meets its legal and regulatory obligations. You will develop policies,
run audits and training, monitor regulations, investigate issues, and
report compliance status to leadership.
KEY RESPONSIBILITIES
•Develop, maintain, and enforce compliance policies and procedures
•Monitor laws and regulations relevant to the business
•Conduct internal audits and risk assessments
•Build and deliver compliance training programs
•Investigate compliance issues and recommend corrective action
•Maintain compliance documentation and records
•Manage third-party and vendor compliance
•Report compliance status and risks to leadership
REQUIRED QUALIFICATIONS
Education: Bachelor's degree in business, law, finance, or a related
field
Experience: [3-5+] years in compliance, audit, legal, or risk
Skills: Knowledge of relevant regulations, strong analytical and
communication skills, attention to detail
PREFERRED QUALIFICATIONS
•Compliance certification (CCEP, CRCM, or industry-specific)
•Experience in [your industry]
•Familiarity with compliance and audit tools
COMPENSATION AND HOW TO APPLY
Compensation: $____ to $____ per year [+ benefits]
To apply, email __ with your resume.
[Company Name] is an equal opportunity employer.
Template 2: Healthcare Compliance Officer (HIPAA)
The healthcare version: combined Privacy and Security Officer scope, HIPAA rules, risk assessments, and BAAs, for organizations of any size that handle health data.
The financial version: the designated BSA Officer role, AML program, SAR and CTR filing, and OFAC screening for regulated financial institutions.
BSA / AML Compliance Officer Job Description
BSA / AML COMPLIANCE OFFICER JOB DESCRIPTION
Company: __ ([City, State])
Reports to: [Board of Directors / CEO]
Employment type: [ ] Full-time
FLSA status: Exempt
POSITION SUMMARY
[Company Name] is hiring a BSA / AML Compliance Officer to serve as our
designated BSA Officer and run our anti-money-laundering program. You will
own the program's internal controls, training, and independent-testing
coordination, and file required reports.
KEY RESPONSIBILITIES
•Serve as the designated BSA Officer for the institution
•Maintain the AML program: internal controls, training, and
independent-testing coordination
•Oversee SAR and CTR filing
•Run OFAC sanctions screening
•Implement Customer Identification and Customer Due Diligence
•Monitor transactions for suspicious activity
•Maintain required records (multi-year retention)
•Report program status to the board
REQUIRED QUALIFICATIONS
Education: Bachelor's degree in finance, business, or a related field
Experience: [3-5+] years in BSA/AML, banking compliance, or a related
role
Skills: Knowledge of BSA, the USA PATRIOT Act, OFAC, and SAR/CTR
requirements
PREFERRED QUALIFICATIONS
•AML or banking compliance certification (CAMS or CRCM)
•Experience at a bank, credit union, MSB, or fintech
•Transaction-monitoring system experience
COMPENSATION AND HOW TO APPLY
Compensation: $____ to $____ per year [+ benefits]
To apply, email __ with your resume.
[Company Name] is an equal opportunity employer.
Template 4: HR Compliance Officer
The HR version: FLSA, FMLA, ADA, EEO, OSHA, I-9, and multi-state wage and pay-transparency compliance, plus the employee handbook and investigations.
HR Compliance Officer Job Description
HR COMPLIANCE OFFICER JOB DESCRIPTION
Company: __ ([City, State])
Reports to: [HR Director / COO]
Employment type: [ ] Full-time
FLSA status: Exempt
POSITION SUMMARY
[Company Name] is hiring an HR Compliance Officer to keep our employment
practices compliant across the jurisdictions where we operate. You will
own employment-law compliance, the employee handbook, and workplace
investigations.
KEY RESPONSIBILITIES
•Maintain compliance with FLSA, FMLA, ADA, EEO, and OSHA requirements
•Manage I-9 and E-Verify processes
•Track multi-state wage-and-hour and pay-transparency laws
•Own and update the employee handbook
•Conduct workplace investigations
•Advise managers on employment-law compliance
•Maintain required employment records
•Support audits and reporting
REQUIRED QUALIFICATIONS
Education: Bachelor's degree in human resources, business, or a related
field
Experience: [3-5+] years in HR compliance or HR generalist work
Skills: Knowledge of federal and multi-state employment law, strong
documentation and communication skills
PREFERRED QUALIFICATIONS
•HR certification (SHRM-CP, PHR, or SPHR)
•Multi-state employment experience
•HRIS experience
COMPENSATION AND HOW TO APPLY
Compensation: $____ to $____ per year [+ benefits]
To apply, email __ with your resume.
[Company Name] is an equal opportunity employer.
Template 5: First Compliance Hire for Small Business
The small-business version: a blended, hands-on role that builds the program from scratch and reports to the founder. This is the variation no competitor template offers.
First Compliance Hire for Small Business Job Description
COMPLIANCE & OPERATIONS LEAD JOB DESCRIPTION (FIRST COMPLIANCE HIRE)
Compliance Officer Skills, Certifications, and Qualifications
Beyond the degree and experience, the skills that make a strong compliance officer are regulatory knowledge, analytical judgment, communication, and integrity. The SHRM job description tools describe a good job description as a plain-language summary of a position's tasks, duties, and responsibilities, and for this role plain language means naming the specific regulations and certifications the work requires. Certifications are industry-specific.
Variation
Common certifications
Typically required?
General / corporate
CCEP, CRCM
Preferred
Healthcare / HIPAA
CHC, CHPC
Preferred
BSA / AML
CAMS, CRCM
Preferred, sometimes expected
HR compliance
SHRM-CP, PHR, SPHR
Preferred
Chief Compliance Officer
CCEP, CRCM
Preferred, sometimes expected
For a first compliance hire at a small company, treat certifications as nice-to-have and weight relevant experience and judgment more heavily. And keep every requirement job-related and neutral, since the EEOC rules on job advertisements prohibit postings that express a preference based on protected characteristics.
How to Write a Compliance Officer Job Description
A strong compliance officer posting takes about fifteen minutes once you settle the industry, the stage, the certifications, and the pay. Here is the process the templates are built around.
1
Pick the template for your industry and stage
General, healthcare, BSA/AML, HR, first hire, or CCO, matched to your regulatory environment and the seniority you need.
2
Write the real responsibilities
List the actual policy, monitoring, audit, training, and reporting duties for your industry.
3
State the certifications precisely
Name the required and preferred certifications for the industry, and separate must-haves from nice-to-haves.
4
Set the reporting line and pay
State who the role reports to and a compensation range, since several states require a range and reporting structure matters for compliance.
5
Add compliance and apply steps
Keep requirements job-related and neutral, add the equal opportunity statement, and give a simple way to apply.
Compliance Officer Pay and Outlook
Compliance officer pay varies widely by industry, seniority, and location. The federal occupation data is the anchor; the real number depends on whether you are hiring a first generalist, a specialist, or a chief compliance officer.
Compliance Officer Pay Anchor (BLS, May 2024)
Federal data for compliance officers shows a median annual wage of $78,420 as of May 2024, with the lowest 10 percent earning less than $46,230 and the highest 10 percent earning more than $130,030. About 418,000 people held the role in 2024, and employment is projected to grow 3 percent from 2024 to 2034 (U.S. Bureau of Labor Statistics).
The spread reflects how much industry and seniority move the number. These are the most recent confirmed federal estimates for the occupation.
Measure
Annual wage
Typical fit
Lowest 10%
Under $46,230
First hire, lower-cost market
Median (50th)
$78,420
Established compliance officer
Highest 10%
Over $130,030
Senior specialist or CCO
Those figures are the most recent confirmed federal estimates (as of May 2024) for compliance officers. For a first compliance hire at a small company in a lower-cost market, anchor the range toward the lower percentiles; for a chief compliance officer or a specialized banking or healthcare role, the upper end applies. Set your range from the level and industry, state it plainly, and remember several states require a pay range in job postings.
Hiring a Compliance Officer Without an HR Department
A large regulated company hires a compliance officer through a recruiting team and slots them into an existing compliance department. A small business in a regulated industry makes the same hire with none of that, usually the owner or an operations lead doing it directly, often for a role that is legally required but has never existed there before. Here is how to do it well.
Know whether your industry actually requires a compliance officer
Many small business owners assume a compliance officer is a big-company role, but several regulated industries require one regardless of headcount. A healthcare practice that handles protected health information is a HIPAA covered entity even at eight employees, and HIPAA requires it to designate a privacy official and a security official, roles a small practice often combines in one person. A community bank or credit union must designate a BSA officer to run its anti-money-laundering program no matter how small it is. Broker-dealers, government contractors, cannabis businesses, and companies pursuing security certifications like SOC 2 face similar requirements or strong contractual pressure. If you are in one of these industries, the question is not whether to appoint a compliance officer but who and at what scope. The healthcare and financial templates here are written for exactly these smaller regulated employers.
Write for the blended reality of a first compliance hire
The generic compliance officer templates online assume a mature function: five or more years of experience, a dedicated team, and board reporting. That is not what a first compliance hire at a small company looks like. In reality this person builds the program from scratch, often splits time between compliance and HR or operations, reports directly to the founder rather than an audit committee, and earns far less than an enterprise compliance executive. Posting an enterprise-style description scares off the right candidates and attracts overqualified ones who will not take the role or the pay. The First Compliance Hire template on this page is written for this reality: a hands-on generalist, a realistic two-to-four-year experience bar, a build-it-from-scratch scope, and a part-time or fractional option. It is the one variation none of the competing templates offer.
Match the template to your industry and your stage
Compliance officer is one of the most industry-dependent titles there is, and the certifications and regulations differ sharply. A healthcare compliance officer lives in HIPAA and may hold a CHC; a BSA officer lives in banking regulation and may hold a CAMS or CRCM; an HR compliance officer lives in employment law and may hold a SHRM-CP or PHR; a general compliance officer covers operational and regulatory risk broadly. Stage matters too: a first hire builds the program, while a chief compliance officer leads an established one and reports to the board. Posting a generic description either overstates a first-hire role or understates a specialized one. Start from the variation that matches your industry and stage, then customize the responsibilities, certifications, and reporting line from there.
After You Hire: Onboarding a Compliance Officer
A compliance officer is one of the hires where onboarding matters most, because the role runs on documentation, training records, and policy acknowledgments from day one. The basics come first: the offer with the compensation and reporting line stated, the I-9, tax forms, and state reporting. The role-specific layer is early access to existing policies, the risk register, training records, and any compliance systems, plus a structured first-90-days plan to stand up or audit the program.
The role also owns documents that other hires do not. The employee handbook template is often theirs to maintain.
FirstHR is a natural fit for what a compliance program needs day to day: e-signature for policy acknowledgments and a code of conduct, document management with multi-year retention for compliance records, training assignments with completion records, and an HRIS with an org chart that shows the compliance reporting structure. Applicant tracking is on the FirstHR roadmap; today the platform connects your job description to onboarding once the candidate signs.
Key Takeaways
A compliance officer keeps a company within its legal and regulatory obligations: policy, monitoring, audits, training, investigations, and reporting.
It is not only a big-company role; regulated small businesses (healthcare, banking, broker-dealers, cannabis) are often required to designate one at any size.
The role is highly industry-dependent: match the template to healthcare HIPAA, BSA/AML, HR, or general compliance, since regulations and certifications differ.
A first compliance hire at a small company is a blended, build-from-scratch generalist reporting to the founder, the variation no competitor template offers.
Anchor pay on the federal median (about $78,420, May 2024), then adjust for industry and seniority across a wide range.
Onboarding is documentation-heavy: give early access to policies and records, and run a structured first-90-days plan to stand up or audit the program.
Frequently Asked Questions
What does a compliance officer do?
A compliance officer makes sure a company meets the legal and regulatory requirements that apply to its industry. The core work is developing and enforcing compliance policies, monitoring relevant laws and regulations, conducting internal audits and risk assessments, building and delivering compliance training, investigating issues, maintaining audit-ready documentation, and reporting compliance status to leadership. The specifics shift sharply by industry: a healthcare compliance officer focuses on HIPAA privacy and security, a BSA officer at a bank runs the anti-money-laundering program, and an HR compliance officer handles employment law. At a small company, the role is often a generalist who builds the program from scratch and may split time with HR or operations. Across all of them, the job is to reduce legal and regulatory risk and keep the organization audit-ready.
Does a small business need a compliance officer?
It depends on your industry. Many small businesses do not need a dedicated compliance officer, but several regulated industries require one regardless of size. A healthcare practice that handles protected health information is a HIPAA covered entity even with a handful of employees, and HIPAA requires it to designate a privacy official and a security official. A community bank or credit union must designate a BSA officer to run its anti-money-laundering program no matter how small. Broker-dealers, government contractors, and cannabis businesses face similar designation requirements, and companies pursuing certifications like SOC 2 often need a compliance lead in practice. If you are in a regulated industry, you likely need the role even at 10 to 50 employees, though a first hire is often a blended, hands-on generalist rather than an enterprise compliance executive.
What is the difference between a compliance officer and a compliance manager?
The titles overlap heavily and many companies use them interchangeably, but there is a rough hierarchy. A compliance officer is the broad term for the person responsible for an organization's compliance, and at a small company that is often the only compliance role. A compliance manager sometimes implies a mid-level role managing parts of a larger compliance function or a small team, sitting below a director or chief compliance officer. In practice, the responsibilities, policy development, monitoring, audits, training, and reporting, are largely the same, and the distinction is more about seniority and team structure than the work itself. For hiring, focus less on officer versus manager and more on the scope, seniority, and industry of the role you actually need, which is what the templates here vary by.
What qualifications and certifications does a compliance officer need?
Most compliance officer roles require a bachelor's degree in business, law, finance, or a field related to the industry, plus several years of experience in compliance, audit, legal, or risk. Certifications are usually preferred rather than required and tend to be industry-specific: CCEP or CRCM for general and corporate compliance, CHC or CHPC for healthcare and HIPAA, CAMS or CRCM for BSA and anti-money-laundering, and SHRM-CP, PHR, or SPHR for HR compliance. For a first compliance hire at a small company, a relevant degree or equivalent experience plus two to four years in a related function is realistic, with certifications as nice-to-have. For a chief compliance officer, expect seven or more years of experience and often an advanced degree. Match the requirements to the industry and seniority of the role you are filling.
How much does a compliance officer make?
Federal data shows a median annual wage for compliance officers of $78,420 as of May 2024, with the lowest 10 percent earning less than $46,230 and the highest 10 percent earning more than $130,030. Pay varies widely by industry, location, seniority, and specialty: a first compliance hire at a small company in a lower-cost market sits toward the lower end, an experienced specialist near the median, and a chief compliance officer well above it. For setting a range, anchor on the federal median, adjust for the level and industry of the role, and state the range in the posting, since several states require it and compliance candidates compare pay closely. Employment for the occupation is projected to grow 3 percent from 2024 to 2034, about as fast as average.
Can one person be both the HIPAA Privacy Officer and Security Officer?
Yes. HIPAA requires a covered entity to designate a privacy official responsible for its privacy policies and procedures, and separately to designate a security official responsible for its security policies and procedures. The rules do not require these to be two different people, and in smaller organizations one person commonly holds both designations, often alongside other duties. This is why the Healthcare Compliance Officer template on this page is written to cover both the Privacy Officer and Security Officer scope in a single role. What matters is that both functions are formally designated, that the person has the authority and time to do the work, and that the designations and the underlying policies, training, and risk assessments are documented and kept current. For a small practice, combining the roles is both permitted and common.
What happens after I hire a compliance officer?
A compliance officer is one of the hires where strong onboarding matters most, because the role depends on documentation, training records, and policy acknowledgments from day one. The first steps are the offer and paperwork: the offer letter with the compensation and reporting line stated, the I-9, tax forms, and state reporting. The role-specific layer is early access to existing policies, the risk register, training records, and any compliance systems, plus a structured first-90-days plan to stand up or audit the program. FirstHR is a natural fit for what a compliance program needs day to day: e-signature for policy acknowledgments and a code of conduct, document management with multi-year retention for compliance records, training assignments with completion records, and an HRIS with an org chart that shows the compliance reporting structure. Applicant tracking is on the FirstHR roadmap; today the platform connects your job description to onboarding once the candidate signs.
