Hiring into a financial services compliance role is not a normal screening exercise. A candidate for a Senior Management Function carries regulatory weight: pre-approval, a statement of responsibilities, fitness and propriety, a six-year reference trail and personal accountability that follows them. Automated screening for SMCR compliance roles is therefore less about matching skills to a job description and more about surfacing regulatory history that a generic parser cannot see and would not know to look for.
This piece sets out what the Senior Managers and Certification Regime actually requires of a hiring firm, what a CV can and cannot tell you about it, and how screening should be structured for FCA-regulated hiring at volume.
The Three Parts of SMCR, and Why Each Changes Screening
The regime has three components, and they impose quite different hiring obligations.
The Senior Managers Regime
Certain roles are Senior Management Functions requiring regulatory pre-approval before the person can perform them. Compliance oversight and the money laundering reporting officer function are among the ones most relevant to compliance hiring, alongside executive and governance functions. Each senior manager has a statement of responsibilities, and specified prescribed responsibilities are allocated among them.
The hiring consequence is that a start date depends on a regulatory approval process, and that the firm must satisfy itself the candidate is fit and proper before applying. Screening that surfaces relevant history early shortens that path materially; screening that surfaces it late is how offers get withdrawn.
The Certification Regime
A wider population performs certification functions: roles capable of causing significant harm to the firm or its customers, such as client-dealing roles, algorithmic trading oversight, material risk takers and certain oversight functions. These do not require regulatory pre-approval, but the firm must assess and certify the individual as fit and proper, initially and on an ongoing basis.
That shifts the burden squarely onto the employer. The firm's own assessment is the control, so the quality and documentation of hiring diligence is the compliance artefact.
Conduct Rules
Individual conduct rules apply to almost all staff, with additional rules for senior managers. Breaches are recordable and, importantly for screening, disclosable in regulatory references. A candidate's conduct history travels with them through the reference process.
Fit and Proper: the Three Limbs
Fitness and propriety assessment rests on honesty, integrity and reputation; competence and capability; and financial soundness. Two observations matter for screening design.
First, only competence and capability is meaningfully assessable from a CV. Honesty and integrity are established through references, criminal record checks where applicable, regulatory history and disclosure. Financial soundness is established through its own checks. A screening tool claiming to assess fitness and propriety from a CV is overreaching and should be treated with suspicion.
Second, competence and capability in a regulated context is not the same as general seniority. It is about whether the person has actually exercised the specific regulatory responsibility the role carries, in a comparable regulatory environment, at comparable scale. A candidate with fifteen years in compliance at an unregulated firm and a candidate who has held compliance oversight at an authorised firm are not interchangeable, and a keyword parser reading "compliance" fifteen times cannot tell them apart.
What a CV Can Genuinely Tell You
Structured extraction from a finance compliance CV can reliably surface a set of fields that generic parsing misses entirely.
- Regulatory status of previous employers. Whether the candidate has worked inside authorised firms, and in what part of the sector. This is the single most informative field and it is usually inferable from employer names and role descriptions.
- Functions claimed. Whether the candidate states they have held a senior management function or a certification function, and which.
- Prescribed responsibilities claimed, where described, and whether the described scope is consistent with the function claimed.
- Regulatory interaction evidence: involvement in authorisations, variations of permission, supervisory engagement, thematic reviews, skilled person reviews, remediation programmes or enforcement response. This is high-value evidence of real regulatory exposure rather than adjacency.
- Subject matter depth across the areas the role actually needs: financial crime, conduct risk, prudential, market abuse, client assets, product governance, consumer outcomes.
- Scale and complexity markers: firm size, group structure, cross-border footprint, whether the firm was subject to enhanced requirements.
- Reference-chain feasibility. Whether the employment history as presented can support the six-year regulatory reference requirement, and where it cannot because of firm closures, acquisitions or gaps.
- Chronology gaps, surfaced factually as items to explore rather than as adverse findings.
The reference-chain field is quietly one of the most valuable. Discovering during onboarding that a candidate's regulatory references cannot be obtained from a dissolved entity is a delay that a screening layer could have flagged on day one.
What Screening Must Not Claim
Four things sit firmly outside a screening tool's scope, and a supplier suggesting otherwise is selling a compliance risk.
- Register verification. Whether an individual is or was approved is established against the regulator's public records, not by reading a CV. Claims should be labelled as claimed and unverified.
- Regulatory references. These are obtained through a prescribed process, directly from previous employers, covering the required period. Nothing in a CV substitutes.
- Criminal record checks for functions where they apply.
- The fitness and propriety determination itself. That is the firm's decision, documented by the firm, and it is the artefact a supervisor will examine.
The role of automation is to make the firm's own assessment better evidenced and faster to reach, and to sequence the verification work earlier. It is not to perform the assessment.
Volume: Where This Actually Bites
Senior management function hiring is low volume by nature. The place automated screening earns its place in a regulated firm is the certification population, which can run to hundreds or thousands of individuals across client-dealing, trading and oversight roles, with continuous recruitment and annual re-certification.
At that scale the same consistency arguments apply as anywhere else, with a sharper edge: the firm has to demonstrate to a supervisor that its fitness and propriety assessments are performed to a consistent documented standard. A process where the standard varies by recruiter, by month and by workload is difficult to defend. A versioned schema, applied uniformly, with evidence and a named human decision recorded against every assessment, is exactly the artefact that conversation needs.
The record should carry, per candidate and per criterion: the criterion and the schema version, the outcome, the verbatim source evidence, explicit notes where expected evidence was absent, unverified claims clearly labelled, the confirming individual, the timestamp, and any override with its reason.
Frequently Asked Questions
Can Software Determine Whether a Candidate Is Fit and Proper?
No. Fitness and propriety is the firm's determination, built from references, regulatory history, criminal record checks where applicable, financial soundness checks and assessment of competence. Software can structure and evidence the competence and capability limb from a CV and flag what needs verifying. The determination remains the firm's, and it must be documented as such.
How Does Screening Help with the Six-Year Regulatory Reference Requirement?
By assessing at application stage whether the presented employment history can actually support it, and flagging where it cannot, dissolved entities, acquisitions, overseas employers, unexplained gaps. Identifying those on day one rather than during onboarding is often the largest single time saving in regulated hiring.
Does a Candidate's Previous Approval Transfer to a New Firm?
No. Approval is function-specific and firm-specific, so a new application is required. Previous approval is useful evidence of prior regulatory scrutiny and does not remove the hiring firm's own obligations.
Is It Appropriate to Automate Screening for Senior Management Roles?
For the small number of senior management appointments, automation adds relatively little beyond consistency of record. Its value is in the certification population, where volume is high, the firm carries the certification burden, and demonstrating a consistent documented standard across hundreds of assessments is the actual compliance requirement.
What About Conduct Rule Breach History?
Candidates rarely disclose conduct breaches on a CV, and that history properly emerges through the regulatory reference process. What screening can do is ensure the reference chain is complete and identify periods that will need explanation, so the reference process is not the first time a gap is noticed.
The Supplier Test for Regulated Hiring
Can it score against role-specific regulatory criteria rather than a generic finance template? Does it distinguish authorised-firm experience from sector adjacency? Does it label every credential and approval claim as unverified? Does it version the criteria and stamp them on each assessment? Does it record the individual who confirmed each outcome and require a reason? Can it export a complete record a supervisor could read? Where does candidate data rest, and is it used for model training?
CVSense approaches this as an evidence problem: surface what the candidate has actually done, in what regulatory context, at what scale, with the source text attached and a human confirming every outcome. In a regime built on documented individual accountability, a screening layer that cannot show its reasoning is not a shortcut. It is an additional thing to explain.
Sources
Financial Conduct Authority. Senior Managers and Certification Regime.
https://www.fca.org.uk/firms/senior-managers-certification-regime
Financial Conduct Authority. FCA Handbook.
https://www.handbook.fca.org.uk/
Information Commissioner's Office. Employment Information and Guidance.
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/
InsightCircle
