Guide · For companies
Six steps: ECCP as the standard, a board or audit line, JD versus non-JD decided before the spec, the sector perimeter, a scorecard written from examinations, and a 90-day programme test. Of 41 compliance-leadership placements since 2017: 21-day shortlist, ten-week median close.
A retained chief compliance officer search reaches a shortlist in 21 days and an accepted offer in ten weeks, median of 41 compliance-leadership files since 2017. Growth-stage cash sits at $220,000–$300,000 base; large-cap financial services at $450,000–$750,000. The six steps below are the hiring method.
| Stage | Base | Target bonus | JD cash premium | Source |
|---|---|---|---|---|
| First CCO, Series B–C / sub-$50m | $200k–$280k | 20–30% | +$15k–$28k | Sartori research, 2017–2026 |
| Growth-stage / scale-up | $220k–$300k | 20–35% | +$18k–$32k | Sartori research, 2017–2026 |
| PE-backed portfolio company | $240k–$360k | 25–40% | +$20k–$40k | Sartori research, 2017–2026 |
| Mid-cap listed, non-financial | $300k–$450k | 30–50% | +$28k–$48k | Sartori research, 2017–2026 |
| Mid-cap listed, financial services | $340k–$520k | 35–60% | +$35k–$60k | Sartori research, 2017–2026 |
| Large-cap listed, non-financial | $380k–$580k | 40–70% | +$45k–$75k | Sartori research, 2017–2026 |
| Large-cap financial services | $450k–$750k | 40–80% | +$55k–$90k | Sartori research, 2017–2026 |
| Dual-regulated bank or insurer | $480k–$720k | 45–80% | +$60k–$95k | Sartori research, 2017–2026 |
| London CCO (GBP cash) | £160k–£280k | 25–50% | +£15k–£35k | Sartori research, 2017–2026 |
| DIFC / regional financial services | $240k–$420k | 25–45% | +$22k–$45k | Sartori research, 2017–2026 |
| Deputy CCO / Head of Compliance | $180k–$280k | 20–35% | +$15k–$28k | Sartori research, 2017–2026 |
| MLRO / Head of Sanctions (specialist) | $210k–$340k | 25–45% | +$18k–$35k | Sartori research, 2017–2026 |
Salary.com's 1 June 2026 posting-derived median base of $234,301 (interquartile $218,701–$258,701) samples all company sizes and titles coded as CCO. It is a different population from the stage bands above. The $3.4 million figure is median TOTAL GC pay at the 500 largest US listed companies (SEC DEF 14A, 2025 season) and is not a CCO figure. Do not blend the three.
Source: Sartori & Partners research, compliance leadership n=41 (CCO, MLRO, Head of Sanctions, DPO/CPO), 2017–2026. Posting median: Salary.com, 1 June 2026.
Score the brief against the three ECCP questions: design for this line of business, resources and empowerment, and whether it works. The Justice Department's Evaluation of Corporate Compliance Programs, updated in September 2024, is what a prosecutor reads. It is also the only scorecard that survives an audit committee. A job description written from a template — “thought leadership,” “stakeholder management,” a list of frameworks — does not answer any of the three.
The Department-wide Corporate Enforcement and Voluntary Self-Disclosure Policy of 10 March 2026 preserves a presumption of declination where a company receives an internal whistleblower report and self-reports as soon as reasonably practicable and no later than 120 days. Someone has to own that window. That someone is the CCO, or the company does not have one. ACC's 2025 survey of 772 chief legal officers found 23 percent of organisations subject to a regulatory investigation or enforcement action in the previous year, and 72 percent naming industry-specific regulatory enforcement as their greatest concern.
Give the CCO a reporting line to the board or the audit committee, not only to the general counsel. The audit chair is the client for this hire as often as the GC is. A solid line solely into Legal looks tidy on an org chart and fails the empowerment question the ECCP will ask. Dual report — dotted to the GC for the legal stack, solid to the audit chair on the programme — is the listed-company design that holds.
ACC's 2026 survey put compliance under majority CLO oversight at 64 percent of 1,049 respondents. That is the GC's ownership of the function. It is not an argument for hiding the CCO. The chair of the audit committee at a Euronext-listed insurer in this book asked for a CCO who had sat across a regulator, not a policy author. The dossiers named examinations. They interviewed three. They hired one.
We asked for a CCO who had sat across a regulator, not a policy author. The dossiers named examinations. We interviewed three. We hired one.
Decide whether you need a lawyer-CCO or a program-CCO before you write the job description. A JD is a cash premium and a different examination posture. It is not a gate. Growth-stage and PE-backed files in this book often close on a programme officer who has built a monitoring plan, owned a whistleblower channel, and sat an examination. Large-cap financial services more often pay the JD premium because the examination is adversarial and the up-the-ladder architecture sits next door in Legal.
Mixing the two mid-search is how a shortlist of four becomes a stalemate. The lawyer-CCO and the programme-CCO are not ranked versions of each other. They are different jobs. The table in section 01 prices the JD as additional cash on base. It does not convert a programme brief into a lawyer brief. The CCO pay 2026 page reconciles posting-derived base with total-comp surveys; this table is the stage-banded cash conversation with finance.
Name the regulator and the examination this company will actually sit, then map people who have sat it. A payments CCO who has not been in a money-transmission build is a different person from an insurance CCO who has sat a solvency examination, and both are different from an energy CCO who has built a sanctions desk. The Riyadh energy file in this book closed in ten weeks because the map included people who had actually built that desk, including people not then in the Kingdom.
New York payments: audit-committee reporting line, assessed against the ECCP, shortlist in week 3, accepted offer in week 10, of 41 compliance-leadership files. City doors: compliance recruiting in New York City, in Boston, in Austin. The perimeter does not change with the city. The talent map does.
From the 41 files
Timeline: Of 41 compliance-leadership files, 2017–2026.
Weight examination evidence, program design, and board posture; do not weight firm pedigree. Each dossier should name the examination, the year, and what the candidate owned: the risk assessment, the budget line, the hiring right, the 120-day window. “Supervised outside counsel on a monitorship” is a different fact from “was the officer the monitor wrote to.”
ACC's 2026 survey recorded 79 percent of CLOs almost always at board meetings and 74 percent describing themselves as providing proactive strategic counsel. The CCO who cannot sit in that room without a script will not last the first examination cycle. Pedigree lines — firm tier, a secondment, a particular LL.M. — describe where a candidate has been. The ECCP asks whether the programme works here.
In the first 90 days the officer must own the risk assessment, the budget, and the right to hire. If those three are still a negotiation at day 90, the appointment has already failed the ECCP's second question. The biography will not save it. Write those three as conditions in the offer letter, not as a hope in the onboarding plan.
Retention of placed in-house leaders in this book: 97 percent at 12 months, 91 percent at 24 months. The 12-month replacement term on a retained CCO search is the contractual backstop, not the management system. Ninety-day check-ins are in the engagement model for a reason. If the seat is empty while you search, interim legal talent in New York City and the wider interim desk start in a median of seven days; interim CCO bills $2,200–$3,800 a day in the US.
Retained CCO searches in this book: 21-day shortlist, ten-week median to accepted offer, of 41 compliance-leadership files since 2017. Fee 28–33 percent of first-year cash, fixed at engagement, three instalments, 12-month replacement. Off-limits on the client's legal department for 24 months after the mandate. The same constants sit on every corporate page in this programme.
Retained CCO
Name the regulator, the examination, the board line, and JD versus non-JD. Write the 90-day test into the letter.
People who have sat this examination. Not a global 'compliance' longlist.
Blind both ways. Audit chair in the process before the first conversation with the market.
Dossiers name examinations. Median shortlist in this book: 21 days.
Accepted offer median week 10. Replacement 12 months. First 90 days are a programme test.
Related seats, different clocks: privacy and AI-governance counsel at 19 days / 9 weeks; legal operations at 20 days / 9 weeks; GC/CLO at 24 days / 11 weeks. Do not staff a CCO search as if it were a GC search, and do not staff it as a specialist-counsel contingency. When to hire privacy or AI-governance counsel and hiring a head of legal operations are the sibling decisions. Company door: for companies.
Write the brief against the Justice Department's Evaluation of Corporate Compliance Programs, updated September 2024. Then set the board or audit line, decide JD versus non-JD, name the sector perimeter, score examinations rather than pedigree, and test the first 90 days. Of 41 compliance-leadership placements since 2017, that sequence is what closed. Chief compliance officer search is the retained product.
The CCO should report to the board or the audit committee, with a dotted line to the CEO — not solely to the GC. A dual report into Legal and the audit chair is the usual listed-company design. ACC's 2026 survey put compliance under majority CLO oversight at 64 percent; that is ownership of the function, not a reason to bury the CCO inside Legal. Compliance recruitment is the wider desk.
A JD is not required; it is a premium on cash and a different examination posture, not a gate. Growth-stage files in this book often close on a programme-CCO. Large-cap financial services more often pay the JD premium because the examination is adversarial. The cash table in section 01 states the premium by stage. See also CCO pay 2026 for the posting-derived base median, which is a different population.
Median of 41 compliance-leadership files since 2017: a 21-day shortlist and an accepted offer in ten weeks. Retained CCO is 28–33 percent of first-year cash, three instalments, 12-month replacement. Offer acceptance in the corporate book is 96 percent; retained completion 92 percent. how to run a general counsel search and in-house search fees, guarantee and off-limits carry the same constants.
Growth-stage CCO cash sits at $220,000–$300,000 base; large-cap financial services at $450,000–$750,000. PE-backed portfolio companies typically sit at $240,000–$360,000; mid-cap listed (non-FS) at $300,000–$450,000. Those are Sartori research bands, cash base, 2026. Salary.com's June 2026 posting-derived median base of $234,301 is an all-size, all-title figure and is not a row in that table. Do not blend either series with the $3.4 million proxy-disclosed GC TOTAL at the 500 largest US listed companies.
The first 90 days are a program test: risk assessment ownership, budget, and whether the officer can hire. The ECCP's second question — is the programme adequately resourced and empowered — is answered in that window or not at all. Interim cover while you search: interim legal talent starts in a median of seven days, with interim CCO at $2,200–$3,800 a day in the US.
The twelve cash rows are Sartori research from compliance-leadership files, 2017–2026. Salary.com is a posting-derived all-size median, labelled as such. The $3.4 million figure is not a CCO figure. ECCP and ACC are the external instruments. Programme clocks: 41 compliance-leadership placements, 21-day shortlist, 10 weeks to offer, 28–33 percent retained fee, 12-month replacement.
Retained CCO search: ECCP-scored dossiers, audit-committee line, 12-month replacement.
Open the servicePosting-derived base versus total-comp surveys, and why the two are not a contradiction.
Open CCO payCCO, MLRO, Head of Sanctions, DPO/CPO — the 41-file family.
Open the deskA policy author who has not owned a risk assessment, a budget and a hiring right will not survive the reading.
Chief compliance officer search
Retained CCO search against the ECCP: 21-day shortlist, ten-week median close, twelve-month replacement. The audit chair is in the process before anyone is called.
