MLRO Recruitment (SMF17)

MLRO Recruitment for FCA-Regulated Firms

Exec Capital recruits Money Laundering Reporting Officers — SMF17 holders — for FCA-regulated firms across the UK. SMF17 is the designated senior management function that attaches personal regulatory accountability to the individual responsible for the firm’s AML and counter-terrorism financing obligations under SMCR. The MLRO is the firm’s nominated officer for the purposes of the Proceeds of Crime Act 2002 and the Terrorism Act 2000: the individual to whom internal suspicious activity reports are made, who decides whether to submit a Suspicious Activity Report to the National Crime Agency, and who is personally accountable to the Board for the firm’s financial crime framework.

If you are appointing an SMF17 — replacing a departing MLRO, establishing the function ahead of FCA authorisation, or separating a combined SMF16/SMF17 role as the firm grows — we are happy to discuss the specifics directly. Every SMF17 mandate is led personally by Adrian Lawrence FCA.

What an SMF17 MLRO appointment involves

SMF17 is the FCA designation that attaches personal regulatory accountability to the firm’s nominated officer under the Proceeds of Crime Act 2002 and the Terrorism Act 2000. As a designated senior management function under the FCA’s Senior Managers and Certification Regime, the MLRO requires individual FCA approval via Form A before the function can be performed. The designation applies to all FCA-regulated firms that are within scope of the Money Laundering Regulations 2017 — which covers the majority of the FCA-regulated firm population.

The SMF17 holder’s responsibilities extend well beyond the submission of Suspicious Activity Reports to the National Crime Agency. The MLRO is responsible for the design and oversight of the firm’s AML and CTF framework, the annual MLRO report to the Board, oversight of the firm’s transaction monitoring programme, management of the relationship with law enforcement, and acting as the escalation point for all internal financial crime concerns. At Enhanced firms, the MLRO also has responsibilities under the firm’s responsibilities map that sit alongside those of the Head of Compliance (SMF16).

At Core firms, SMF17 is frequently held alongside SMF16 by the same individual. As firms grow, the increasing regulatory complexity and volume of suspicious activity reporting typically make the combination unmanageable and the two functions are separated. For the comprehensive treatment of how to approach an SMF17 appointment, see our SMF17 MLRO hiring guide.

How Exec Capital approaches SMF17 mandates

The SMF17 mandate is structured differently from most executive search mandates because the qualified candidate pool is accessed primarily through direct outreach rather than advertising. An MLRO search that relies on job boards will not find the candidates it needs — the approved, experienced individuals the role requires are not actively scanning job advertisements. We run SMF17 searches from the network up.

We structure mandates around three workstreams. First, candidate identification through direct outreach to approved SMF17 holders across the relevant sector, including individuals who are not actively looking but who may be open to a well-structured approach. Second, regulatory pathway preparation: for candidates without prior SMF17 approval, we manage the FCA Form A preparation process including fit-and-proper documentation, Statement of Responsibilities drafting, and the regulatory references process. Third, scope and framework assessment: before candidate identification begins, we establish whether the firm’s AML framework is structured to an appropriate standard to retain a credible SMF17 candidate — a weak framework is itself a barrier to attracting the right individual.

We work on a retained basis for SMF17 mandates. For firms appointing an MLRO for the first time as part of an FCA authorisation, the mandate includes initial scoping to define the appropriate seniority and the relationship between the SMF17 function and the compliance function more broadly.

The candidate pool

The SMF17 candidate pool is the most constrained of any SMF designation relative to the volume of firms that require the function. Three segments are relevant across different mandate types.

Currently approved SMF17 holders are the primary pool. These candidates have existing FCA approval, established NCA relationships, and direct experience of managing a financial crime framework under regulatory scrutiny. The subset who are actively moveable at any given time — with relevant sector experience and appropriate seniority — is typically fewer than ten individuals nationally for any specific firm type. This is the defining characteristic of the SMF17 market and the reason that network access matters more than advertising reach.

Senior AML and financial crime professionals below SMF level represent the step-up pool. Deputy MLROs, Heads of Financial Crime, and Senior AML Managers at larger regulated firms are candidates for a first SMF17 appointment, particularly at Core firms or firms seeking to separate a previously combined SMF16/SMF17 role. The FCA’s assessment of this group focuses on depth of AML technical knowledge, experience of managing SAR decisions under time pressure, and evidence of Board-level reporting. The JMLSG guidance depth is assessed carefully.

MLROs from adjacent regulated sectors — including legal firms with MLROs under the SRA’s AML regime, accountancy practices, and estate agents regulated under the Money Laundering Regulations — can be relevant for smaller or simpler FCA-regulated firms. The transition to FCA regulation and the SMF17 designation requires careful Form A preparation, but the underlying financial crime expertise is transferable where the firm’s permission set is not complex.

The overlap with the SMF16 Head of Compliance candidate pool is significant at the combined-function level. Individuals holding dual SMF16 and SMF17 approval are genuinely rare and command a substantial premium over single-function approved candidates.

Permanent, interim and fractional appointments

Permanent SMF17 appointments are the default for most regulated firms. The personal accountability attached to the MLRO designation, the ongoing NCA relationship, and the continuity required to manage a financial crime framework effectively all point to a permanent, embedded appointment rather than a transient arrangement.

Interim MLRO arrangements arise most commonly where an MLRO departs at short notice, where an enforcement action requires immediate management change, or where an FCA authorisation requires a named MLRO before the permanent appointment can complete the Form A process. As with all SMF functions, the interim individual must hold FCA approval or the firm must notify the FCA of the change and manage the transition within the regulatory framework. Firms should not assume that an experienced AML professional can perform the SMF17 function without approval in place.

Fractional MLRO arrangements are viable for smaller Core firms — particularly sub-£30m revenue regulated firms — where the volume of suspicious activity reporting and the complexity of the AML framework do not justify a full-time appointment. The fractional model is increasingly used by payment firms and smaller wealth managers who require a named, approved MLRO but whose financial crime volumes support a defined days-per-week engagement rather than a full-time hire. The FCA does not prohibit part-time SMF17 holders, but the arrangement must be robustly documented and the individual’s availability must be sufficient to manage time-sensitive SAR decisions. See our Fractional Compliance Officer page for more on fractional compliance appointments.

Indicative timelines

The realistic timeline for a clean SMF17 appointment runs to ten to sixteen weeks from search opening to first day, assuming the candidate has prior FCA approval. The candidate identification phase is often the longest single workstream — given the depth of direct outreach required — rather than the FCA approval process. Where the candidate requires a first-time Form A submission, the FCA’s approval adds a further six to twelve weeks, and the Form A for an SMF17 appointment involves substantive FCA review of the candidate’s AML technical competence, not merely a standard fit-and-proper assessment.

Firms with active FCA supervisory engagement — or any history of AML-related findings — should expect the Form A process to involve direct FCA questioning of the candidate’s specific approach to the financial crime issues the firm has experienced. We prepare candidates for this as part of the mandate and do not present candidates for Form A submission until the preparation is complete. For the FCA’s published guidance on the approval process, see the FCA’s Form A application guidance.

Sectors and firm types we work across

Our SMF17 mandates span payment institutions and e-money firms, wealth managers and private banks, insurance intermediaries, consumer credit firms, asset managers, and specialist investment firms. The AML risk profile — and therefore the candidate specification — differs substantially across these sectors, and we do not apply a generic financial crime recruitment approach across them.

Payment institutions and e-money firms face the highest transaction monitoring volumes and the most complex SAR decision-making environments of any firm type in the retail financial services sector. Their SMF17 candidates must have direct experience of automated transaction monitoring systems, high-volume SAR submission, and the specific FATF and FCA expectations for payment firm AML frameworks. Wealth managers and private banks require SMF17 candidates with depth in know-your-customer and enhanced due diligence for high-net-worth clients, and familiarity with the specific vulnerabilities of wealth management to money laundering risk.

The regulatory environment for SMF17 is evolving rapidly. The Economic Crime and Corporate Transparency Act 2023 has strengthened the AML obligations on regulated firms and extended corporate criminal liability for failure to prevent fraud. These changes are increasing both the personal accountability exposure of SMF17 holders and the seniority required of the individuals firms are appointing to the function.

For the broader FCA-regulated firm executive cluster, see our FCA Regulated Firm Recruitment hub. For the SMF framework overview, see our SMF Roles guide.

Working with Exec Capital on an SMF17 mandate

Every SMF17 mandate is led personally by Adrian Lawrence FCA. The MLRO appointment is the most network-dependent search in the regulated firm executive market — success depends on access to approved individuals who are not actively visible in the market, and on the credibility to have a substantive conversation with them about a specific firm and mandate. As a Fellow of the ICAEW with substantial experience in regulated environments, Adrian brings both the network access and the regulatory substance to make that conversation credible.

For firms uncertain whether their financial crime framework is at the standard required to attract and retain a credible SMF17 candidate, we offer an initial structured conversation — free of obligation — that assesses the firm’s AML framework against the typical expectations of an experienced MLRO before search begins. This frequently identifies framework gaps that would otherwise surface during the candidate assessment process and slow the appointment.

For the compliance function that typically sits alongside the MLRO, see our SMF16 Head of Compliance Recruitment page. For the risk function that partners both at Board level, see our CRO Recruitment page.

Further reading

For the complete treatment of SMF17 appointments — including the nominated officer framework, the SAR decision-making process, JMLSG guidance compliance, the Form A process, and common appointment pitfalls — see our SMF17 MLRO hiring guide. For the broader SMCR framework, see our SMF Roles guide.

For the compliance function that frequently sits alongside or combines with the MLRO at smaller firms, see our SMF16 Head of Compliance Recruitment page. For the risk function that partners the compliance and MLRO functions at Board level, see our CRO Recruitment page and SMF4 CRO hiring guide.

For the FCA’s published SMCR guidance, see the FCA’s SMCR overview. For the industry AML guidance that defines the standard the MLRO is expected to implement, see the Joint Money Laundering Steering Group guidance.