Conduct Risk Analyst
91% skill overlap
To add: Consumer credit and consumer duty rules (CCD, Consumer Duty, TILA)
Your role
Regulatory Change Analyst
Full profileYour role
- L3 salary
- Not published yet
- Upcoming dated changes
- 21 changes ahead
What the role does
A Regulatory Change Analyst tracks new and changing financial regulation and makes sure a firm knows what each change means and acts on it in time. The role scans publications from EU and national authorities, assesses which rules apply to which business lines, maps requirements to policies, processes and systems, assigns owners and follows implementation until the change is in force. Topics range from conduct and investor protection to anti-money laundering, prudential reporting and operational resilience.
Read a day in the life
A day in the life
The analyst starts with the regulatory horizon scan: overnight, a European authority published final guidelines and a national regulator issued a consultation. The analyst reads the summaries, logs both in the regulatory change inventory and drafts a first view of which business lines are affected. Late morning goes to an impact assessment on the final guidelines. The analyst breaks the text into individual requirements, maps each one to existing policies and processes, and marks gaps. A call with legal follows to confirm how one requirement applies to a branch in another country. After lunch the analyst meets owners in operations and finance to agree actions, deadlines and evidence for each gap. Mid-afternoon brings the monthly regulatory change forum, where the analyst presents upcoming dates and the status of open items. Two actions are late, and the analyst agrees a recovery plan with their owners. The day ends with updating the inventory and preparing a short note on the consultation for senior management.
Levels
- L1 Starting out
- L2 Independent
- L3 Senior or specialist
- L4 Leads a team or an area
- L5 Leads the function
Full level descriptions and job titles
The EFO level names are the common scale; job titles differ between employers.
| Level | What the work looks like | Typical years | Typical job titles |
|---|---|---|---|
| L1 Starting out | Monitors regulatory publications, logs them in the change inventory, prepares summaries and trackers, and learns financial regulation and assessment methods under supervision. | 0-2 | Banks: Analyst, Junior Analyst, Associate (asset servicing), Trainee, GraduateAsset servicers: Junior, Specialist (entry), Officer |
| L2 Independent | Owns impact assessments for a set of regulations end to end: requirement mapping, gap analysis, action owners and tracking, and is the first contact for business teams. | 2-5 | Banks: Analyst / Senior Analyst, AssociateAsset servicers: Specialist, Senior Specialist, Senior Officer |
| L3 Senior or specialist | Senior analyst or subject matter expert. Leads assessments on complex or cross-border rules, advises on interpretation, answers consultations and represents compliance in projects. | 5-9 | Banks: Senior Associate, AVP, Assistant ManagerAsset servicers: Senior Specialist, Expert, Team Lead (small team) |
| L4 Leads a team or an area | Leads the regulatory change or horizon scanning team, owns the change inventory and governance, reports status to senior management and handles regulator and audit questions. | 8-14 | Banks: VP, Manager, Senior ManagerAsset servicers: Team Lead, Manager, Head of Section |
| L5 Leads the function | Head of regulatory change or regulatory affairs for a legal entity or region. Accountable for how the firm identifies and implements new rules and for engagement with regulators. | 12+ | Banks: Director, Executive Director, Managing Director, Head of functionAsset servicers: Head of Department, Director |
Skills
Where the skill weights come from
Each role lists its skills with a tier and a weight. The weights of one role add up to 100 percent.
Source: the EFO role catalogue, built from the ESCO classification and reviewed by the editors.
The percentage is the skill's share of the role; the bars are drawn relative to the anchor skill, which is shown full.
Critical
- Conduct and investor protection rules (MiFID II, FINRA, SEBI)Weight 13.3%Relevant to you
- Regulatory change impact assessmentWeight 8.9%Relevant to you
- Internal controls and risk oversightWeight 8.9%Relevant to you
- Anti-money laundering regulationWeight 8.9%Relevant to you
- Prudential and regulatory reporting (COREP, FINREP, US call reports)Weight 8.9%Relevant to you
Important and supporting skills 17
Important
- Ethical judgment in grey areasWeight 4.4%Relevant to you
- Professional written communicationWeight 4.4%Relevant to you
- Control mindset (what could go wrong)Weight 4.4%Relevant to you
- Data protection and privacy law (GDPR, CCPA, DPDP)Weight 4.4%Relevant to you
- Legal research and regulatory interpretationWeight 4.4%Relevant to you
- Attention to detailWeight 4.4%Relevant to you
- Risk judgment and escalation instinctWeight 4.4%Relevant to you
- Corporate governanceWeight 4.4%Relevant to you
Supporting
- Process mapping and redesignWeight 2.2%Relevant to you
- Operational resilience and ICT risk rules (DORA and equivalents)Weight 2.2%Relevant to you
- Advanced Microsoft ExcelWeight 2.2%Relevant to you
- Stakeholder managementWeight 2.2%Relevant to you
- Assessing the quality of sourcesWeight 2.2%Relevant to you
- Querying data with SQLWeight 2.2%Relevant to you
Useful
- Ticketing platforms (ServiceNow)Weight 0.7%Relevant to you
- Working to tight deadlinesWeight 0.7%Relevant to you
- Financial markets knowledgeWeight 0.7%Relevant to you
Processes
The work the role takes part in.
- AML transaction monitoring
- Audit and assurance
- Conduct and investor protection
- Operational risk and controls
- Prudential reporting
- Regulatory change management
What each process covers
- AML transaction monitoringMain
- Audit and assuranceMain
- Conduct and investor protectionMain
- Operational risk and controlsMain
- Prudential reportingMain
- Regulatory change managementMain
- Data management and governanceSupporting
Where the role concentrates
How AI is changing the role
AI tools now scan regulatory publications, classify them by topic, extract obligations and map them to policies, cutting the time spent reading and tagging.
Read the full assessment
AI tools now scan regulatory publications, classify them by topic, extract obligations and map them to policies, cutting the time spent reading and tagging. Analysts increasingly check and correct these outputs. The European Banking Authority reports wide AI use in EU banks, and the EU AI Act is itself a new rule set to assess. Value grows in interpretation, judging what a rule means for a specific business and agreeing practical actions with owners. The World Economic Forum Future of Jobs Report 2025 lists analytical thinking and curiosity and lifelong learning among the fastest-growing skills.
Dated changes for this role
- Second Consumer Credit Directive appliesRelevant to you
- DORA register of information: 2027 annual submissionRelevant to you
- Swiss capital and liquidity ordinance changes from January 2027Relevant to you
- CRR3 output floor rises to 60 percent in 2027 and 65 percent in 2028Relevant to you
- CSRD scope narrowed by Omnibus I; second wave reports from financial year 2027Relevant to you
Worth knowing
Salary snapshot
Salary figures are not published yet
The L3 salary range for this role, with its sources, will appear here when the salaries section opens.
Certifications
- CAMS
- ICA Diploma in Compliance
- CIPP/E
Concepts to know
- AI Act (Artificial Intelligence Act)
- CCP (Central counterparty)
- CSD (Central securities depository)
- DORA (Digital Operational Resilience Act)
- Instant Payments Regulation (IPR)
- PSD2 (Second Payment Services Directive)
- T+1 (Settlement cycle)
- Account information service (AIS)
All 24 concepts
- Active account requirement (EMIR 3)
- AMLA (Anti-Money Laundering Authority)
- AMLR (Anti-Money Laundering Regulation)
- Basel III
- Clearing obligation
- CRD6
- Critical ICT third-party provider (CTPP)
- Cross-border Payments Regulation
- CRR (Capital Requirements Regulation)
- CRR3
- CSDR (Central Securities Depositories Regulation)
- CSDR settlement discipline
- Delegated act
- Digital euro
- Dynamic currency conversion (DCC)
- EBA taxonomy (reporting framework release)
Neighbouring roles
Roles that need many of the same skills, by weighted skill overlap, with the skills you would need to add.
Compliance Officer
90% skill overlap
Your role
Data Protection Specialist
57% skill overlap
To add: Identity and access management
Your role
Privacy Specialist (Technology)
56% skill overlap
To add: Functional analysis between business and IT, Identity and access management
Your role
Legal Counsel
45% skill overlap
To add: Contract drafting and negotiation, Integrity and discretion, Applied employment law
Your role
Risk Advisory Consultant
42% skill overlap
To add: Basel framework and capital, Target operating model design, Risk measures and sensitivities
Your role
Do this job? Suggest a correction
Sources
Recovery planA recovery plan is the document in which a bank sets out how it would restore its own financial position after severe stress, with indicators that trigger action and a menu of recovery options. The BRRD requires it and supervisors assess it every year.
AI Act (Artificial Intelligence Act)The AI Act, Regulation (EU) 2024/1689, is the EU law that sets rules for AI systems according to their risk: some practices are banned, high-risk systems face strict requirements, and general-purpose AI models have transparency duties. Credit scoring of individuals is a high-risk use.