SMF16 Explained: The Compliance Oversight Function in FCA-Regulated Firms

SMF16 Recruitment: Find a Compliance Oversight Function Approved Person

SMF16 is the Senior Management Function under the FCA’s Senior Managers and Certification Regime (SM&CR) that designates the senior individual responsible for compliance oversight in a regulated firm. The holder is named on the FCA Register, has personal regulatory liability for the firm’s compliance with FCA rules, and is the primary regulatory point of contact alongside the SMF1 (CEO) and SMF17 (MLRO) where applicable. In most firms, the SMF16 holder uses the corporate title Head of Compliance, Chief Compliance Officer, or Compliance Director.

This guide covers what SMF16 actually means in practice — the scope of the compliance oversight responsibility, how the function interacts with the FCA, what personal liability looks like, how the role differs across firm types and SM&CR tiers, and what FD Capital looks for when placing SMF16-approved candidates. It also covers compensation benchmarks, the specific reasons SMF16 searches now take longer than they did before Consumer Duty, and the increasing premium attached to candidates with experience leading conduct programmes through implementation.

What’s missing from most explanations of SMF16 is the practical recruitment perspective — what the FCA expects from candidates, how the qualified candidate pool actually breaks down by sector and experience level, and what hiring firms get wrong when they treat SMF16 like a generic compliance hire. That’s the gap this guide fills.

What SMF16 Means and When It’s Required

SMF16 is the Compliance Oversight function under SM&CR. The holder is responsible for ensuring the firm complies with all relevant requirements of the FCA Handbook and other regulatory frameworks, for overseeing the compliance function, and for serving as the senior management point of accountability for the firm’s regulatory conduct.

SMF16 is required under SM&CR for all firms in the Core and Enhanced tiers — meaning effectively all FCA-authorised firms above the Limited Scope threshold must have a designated SMF16. The role applies regardless of firm sector — investment firms, asset managers, wealth managers, payments firms, e-money institutions, consumer credit firms, insurance intermediaries, and others.

One important nuance: SMF16 and SMF17 (MLRO) are commonly held by the same individual in smaller firms. This is permitted under SM&CR and is standard practice in firms below approximately £20m revenue. In larger firms, the workload and regulatory expectation typically requires separate holders. The FCA expects firms to consider whether combining the roles is appropriate for the firm’s size, complexity and risk profile — and to review this periodically.

SMF16 vs Corporate Compliance Title

Most firms use the corporate title Head of Compliance, Chief Compliance Officer or Compliance Director for the SMF16 holder. The corporate title and the regulatory function sit together in standard practice. But the SMF16 designation carries the regulatory accountability, personal liability and FCA approval requirements regardless of the corporate title used.

For recruitment purposes, the SMF16 dimension means:

• The candidate pool is meaningfully smaller than the broader compliance management market — only candidates with direct regulated-firm experience or the demonstrable capability to obtain SMF approval are realistic options
• Compensation carries a regulated-firm premium of 20-30% over equivalent non-regulated compliance roles
• The hiring timeline includes 12-16 weeks for FCA approval after offer acceptance
• Reference and due diligence requirements are substantially more thorough than for non-SMF roles

Firms recruiting “Head of Compliance” without specifying SMF16 approval requirements typically attract a mix of regulated and non-regulated candidates and waste time filtering. The job specification should be explicit from the outset.

The Three Pillars of SM&CR and the SMF16’s Position

SMF16 sits at the intersection of the three pillars of SM&CR — and in practical terms, often runs the implementation of two of them.

1. The Senior Managers Regime

SMF16 is itself a Senior Management Function. The holder must be pre-approved by the FCA, has a Statement of Responsibilities, and is subject to the Duty of Responsibility — meaning personal enforcement exposure where compliance failures occur in their area and reasonable steps were not taken.

2. The Certification Regime

SMF16 typically owns the firm’s implementation of the Certification Regime — which applies to non-SMF employees in significant harm functions. The compliance function is responsible for the Fit & Proper assessment process, the annual certification cycle, the firm’s internal record-keeping for certified employees, and the filing of regulatory references when certified individuals leave or join. This is meaningful operational work — for an Enhanced firm with several hundred Cert Regime employees, it absorbs substantial compliance function bandwidth.

3. The Conduct Rules

SMF16 typically owns the firm’s Conduct Rules training programme, breach reporting framework and the conduct culture work. Tier 1 (Individual) Conduct Rules apply to all firm employees; Tier 2 (Senior Manager) Conduct Rules apply to SMFs themselves. The compliance function delivers the training, monitors the breach reporting and works with HR on conduct-related disciplinary matters. For more on the conduct rules framework specifically, see our FCA Conduct Rules Guide.

Personal Liability and the Duty of Responsibility

SMF16 carries the standard SMF Duty of Responsibility under section 66B of FSMA — meaning personal FCA enforcement is possible where compliance failures occur in the SMF16’s area and reasonable steps were not taken to prevent the breach.

The most common areas of SMF16 personal liability exposure:

• Compliance monitoring failures: Where the firm’s compliance monitoring programme is inadequate or failed to detect a breach that better monitoring should have caught.
• Regulatory reporting failures: Where regulatory reports are late, inaccurate, or omitted in areas under SMF16 responsibility (versus SMF2’s prudential reporting).
• Conduct Rules breach handling: Where conduct breaches occur and reporting/investigation is inadequate.
• Failure to escalate to the FCA: Notifications under Principle 11, SUP 15, and similar are increasingly enforcement-prominent. Failure to notify the FCA promptly of significant matters is a recurring enforcement theme.
• Consumer Duty oversight failures: Since Consumer Duty came into force, the SMF16 typically owns or co-owns the firm’s Consumer Duty governance framework. Failures to implement, monitor or evidence Consumer Duty compliance carry direct exposure.
• Financial promotions failures: Where financial promotion approval processes break down and unfair, unclear or misleading promotions are issued.
• Senior management challenge: Where the SMF16 was aware of a problematic decision by another SMF or the board and failed to challenge it through appropriate governance processes.

The “reasonable steps” defence is the key feature of the regime. SMF16 candidates with prior FCA enforcement experience know that documenting their challenge, escalation and oversight activity is essential — not because the FCA expects perfection, but because the SMF needs to be able to demonstrate they took the steps that a reasonable senior manager in their position would have taken.

Consumer Duty — How the SMF16 Role Has Expanded Since 2023

Consumer Duty (PS22/9) came into force for retail products in July 2023 and for closed products in July 2024. It is the most significant expansion of FCA conduct regulation in a decade and has substantially expanded SMF16 scope.

The SMF16’s Consumer Duty responsibilities typically include:

• Owning the firm’s Consumer Duty governance framework and the implementation programme
• Annual Consumer Duty Board Report (mandatory for all in-scope firms) — preparing or overseeing this document
• Fair value assessments — overseeing the methodology and the assessment process
• Consumer outcomes monitoring — defining the metrics, collecting the data, reporting to the board
• Vulnerable customers — embedding the framework, training, and monitoring outcomes
• Distribution chain obligations — managing the firm’s interactions with distributors and ensuring information flows appropriately
• Consumer Duty culture — embedding the “putting customers first” principle into firm-wide culture and incentive structures

The volume of work this represents is not trivial. For a firm in the early years of Consumer Duty implementation, the programme can absorb 30-50% of the SMF16’s time alongside the existing compliance workload. SMF16 candidates who have led Consumer Duty programmes through implementation are now genuinely scarce in the market and command a premium. For more on the Consumer Duty framework, see our Consumer Duty Guide.

Day-to-Day Responsibilities of an SMF16

The day-to-day responsibilities of an SMF16 vary by firm but typically include:

• Compliance monitoring: Designing, executing and reporting on the compliance monitoring programme — the systematic testing of compliance with FCA rules across the firm’s activities
• Compliance advisory: Providing advice to the business on regulatory implications of new products, propositions, distribution models and similar — the “second line” advisory role
• Regulatory change management: Tracking FCA consultations, policy statements and rule changes; assessing impact on the firm; leading implementation of new requirements
• FCA relationship management: Acting as the primary point of contact with the FCA supervisory team, managing supervisory dialogue, responding to information requests, leading the firm’s preparation for any FCA visits or skilled person reviews
• Regulatory reporting: Submission of regulatory returns covering conduct matters (versus SMF2’s prudential reporting). Includes periodic firm reports, breach reporting, financial promotions reporting, and ad-hoc notifications
• Training and competence: Designing and delivering compliance training across the firm; managing the T&C scheme for in-scope employees
• Financial promotions: Approving financial promotions where the firm has the appropriate permissions; overseeing the financial promotions framework
• Conduct Rules and SMCR administration: Running the firm’s SMCR processes — Statement of Responsibilities updates, Form A submissions for new SMFs, the certification cycle, conduct breach reporting
• Consumer Duty programme: Leading the firm’s Consumer Duty programme as described above
• Compliance team leadership: Recruiting, managing and developing the compliance team

The proportion of time spent on each area varies by firm size. In smaller firms, the SMF16 is highly hands-on across all areas. In Enhanced-tier firms with larger compliance teams, the role is more about leadership, FCA relationship management, board engagement and strategic compliance — with the operational delivery handled by senior compliance professionals.

Sector-Specific SMF16 Variations

SMF16 candidates are not interchangeable across sectors. The regulatory frameworks, dominant conduct concerns, and specific FCA rules vary substantially.

SMF16 in wealth management firms

Wealth management compliance focuses on suitability (COBS 9), client classification, financial promotions, ongoing servicing, and the specific Consumer Duty implications for retail wealth clients. SMF16 candidates in this sector typically have deep COBS knowledge and experience of FCA thematic reviews on suitability and value.

SMF16 in asset management and AIFM firms

Asset management compliance covers AIFMD, UCITS (where applicable), MiFID conduct, conflicts of interest, best execution and order handling, and the AIFMD-specific governance frameworks. The SMF16 candidate profile here typically includes experience of fund-level compliance alongside firm-level compliance.

SMF16 in payments and e-money firms

Payments compliance covers PSR/EMR rules, safeguarding (different from CASS), authorised push payment fraud, AML integration, and the increasingly active FCA agenda on payments firm conduct. SMF16 candidates here need specific PSR/EMR experience and increasingly need fintech regulatory experience.

SMF16 in consumer credit firms

Consumer credit compliance covers CONC, affordability assessments, financial promotions, the FCA’s vulnerable customer agenda, and historically the BCOBS regime for banking conduct. Consumer Duty has substantially elevated scrutiny in this sector.

SMF16 in firms under FCA supervisory pressure

Firms with active skilled person reviews, ongoing remediation programmes, or recent enforcement action need SMF16 candidates with experience operating under regulatory scrutiny. The premium attached to these candidates is significant — and the candidate due diligence process cuts both ways. See our Section 166 Guide for context.

SMF16 Compensation Benchmarks (UK 2026)

SMF16 compensation reflects regulated-firm complexity, personal liability and the smaller candidate pool:

The Consumer Duty premium on top of these benchmarks for candidates who have led implementation programmes is typically £20k-£40k on base salary, with proportional uplifts on total package. Firms that have not yet completed their Consumer Duty maturity arc need experienced candidates and pay accordingly.

Fractional and interim SMF16 engagements are increasingly common. Day rates for established SMF16 candidates run £1,000-£1,500. Fractional SMF16 is particularly suited to smaller firms post-authorisation, firms in transition between heads of compliance, or firms managing through specific remediation programmes.

Hiring an SMF16 — What FD Capital Looks For

Prior SMF16 (or pre-2019 CF10) approval

Candidates with prior SMF16 approval — or prior CF10 approval before SM&CR rolled out for solo-regulated firms in December 2019 — have a faster FCA approval path. Candidates approaching SMF for the first time can be approved but require more detailed substantiation.

Sector match

An SMF16 with deep wealth management compliance experience may not be the right candidate for a payments firm, and vice versa. Sector-specific regulatory knowledge — COBS, AIFMD, PSR/EMR, CONC — is rarely transferable in the timeframe most hiring firms need.

Consumer Duty implementation experience

For firms still building or maturing their Consumer Duty framework, candidates who have led similar programmes elsewhere are now genuinely valuable. The market has developed a clear premium for this experience since 2023.

Financial Conduct Authority engagement experience

Strong SMF16 candidates have managed live FCA dialogue — supervisory meetings, information requests, thematic review participation, and ideally skilled person review experience. Candidates whose FCA engagement has been confined to routine reporting often struggle in roles requiring active supervisory management.

Cultural and governance fit

An experienced SMF16 expects to be involved in significant strategic decisions, expects board engagement on conduct matters, and expects to be able to challenge executive decisions where appropriate. Firms where these conditions are not met find SMF16 retention difficult.

Reference depth

Reference checking for SMF16 placements typically extends to prior board members, prior FCA supervisory contacts where appropriate, and peer SMFs from the candidate’s previous firms — alongside the mandatory Regulatory References under SM&CR.

SMF16 and the Wider SMF Framework

SMF16 sits at the centre of the firm’s regulatory governance and works closely with adjacent SMFs:

• SMF2 (Chief Finance Function): SMF16 owns conduct compliance; SMF2 owns prudential reporting and capital. The intersection includes regulatory reporting (where each owns specific returns) and Consumer Duty fair value assessment (joint ownership in many firms).
• SMF4 (Chief Risk Function): SMF4 owns enterprise risk; SMF16 owns regulatory compliance risk specifically. In smaller firms these are combined under a Chief Risk and Compliance Officer (see our CRCO recruitment).
• SMF17 (MLRO): Frequently combined with SMF16 in smaller firms. Where separate, SMF17 reports to SMF16 in most firm structures.
• SMF18 (Other Overall Responsibility): Used for senior managers responsible for areas not covered by another SMF — including, in some structures, complaints handling, financial promotions, or specific business units.
• SMF24 (Chief Operations Function): In Enhanced firms, owns operational delivery. SMF16 oversees compliance with operational rules; SMF24 manages operational execution.

For the broader regulatory framework, see our complete SMCR guide.

Common SMF16 Recruitment Pitfalls

Underestimating timeline. SMF16 mandates take 16-26 weeks end-to-end. Compressed timelines lead to compromised candidate quality.

Generic compliance job specs. Specifications that don’t address the regulatory dimension explicitly attract a mix of regulated and non-regulated candidates and waste time on filtering.

Pricing at non-regulated compliance market rates. The regulated-firm premium is real and qualified candidates know their value.

SMF16/SMF17 combination unclear. Smaller firms that haven’t decided whether to combine SMF16 and SMF17 in a single role often confuse candidates during the search process.

Insufficient board engagement on compliance. Firms that view compliance as a back-office function struggle to attract experienced SMF16s.

Regulatory history not addressed honestly. Skilled person reviews, enforcement findings, ongoing remediation — these need to be discussed openly with candidates from first interview.

Further Reading and Authoritative Sources

For the FCA’s authoritative guidance on Senior Management Functions, see FCA Handbook SUP 10C. For Consumer Duty, the FCA’s Consumer Duty pages provide the authoritative reference. For the conduct rules framework, see the COCON Sourcebook.

For sector-specific compliance frameworks, see the COBS Sourcebook for conduct of business, the CONC Sourcebook for consumer credit, and the SYSC Sourcebook for systems and controls.

Related Guides: SMCR and SMF Functions

Part of FD Capital’s series of practical guides for FCA-regulated firms: SMCR — The Complete UK Guide | SMF2 — The Chief Finance Function | SMF4 — The Chief Risk Officer Function | SMF17 — The MLRO Function | SMF18 — The Other Overall Responsibility Function | SMF24 — The Chief Operations Function | Consumer Duty Guide | FCA Conduct Rules Guide