FCA Consultant vs In-House Compliance Officer: Which Does Your Firm Actually Need?
Every FCA-regulated firm reaches the same fork in the road. The compliance workload has outgrown the spreadsheet-and-goodwill approach, the board wants assurance, and someone asks the question: do we bring in an FCA consultant, or do we hire our own compliance officer?
It is rarely a matter of ambition. It is a matter of arithmetic, risk and time. This guide compares the two models honestly – what each costs, what each covers, where each one stalls – so you can make a decision you can defend to your board rather than one you drift into.
What an FCA consultant actually does
An FCA consultant is an external specialist who steps into your firm for a defined scope or on an ongoing retainer. Good ones have sat on both sides of the regulator’s desk: they have written policies that survived scrutiny, handled FCA queries, and run monitoring programmes across multiple firms.
In practice, external FCA compliance consultancy typically delivers:
- Policies, procedures and control frameworks drafted for your actual business model, not a template library
- Gap analysis against the FCA rules that apply to you, with a risk-rated remediation plan
- Independent review work: file testing, thematic reviews, compliance benchmark audits and board-ready reporting
- AML and financial crime support, including business-wide risk assessments and CDD frameworks
- Regulatory horizon scanning, impact assessments and help responding to FCA information requests
- SMCR support, training and oversight during FCA authorisation
The key word is cross-firm. A consultant has seen the same problem at fifteen other firms, which is why they usually spot it faster than someone encountering it for the first time.
What an in-house compliance officer actually does
An in-house compliance officer – often also your MLRO, sometimes also your COO – owns compliance day to day. They sit in the business, attend meetings, chase evidence, run the monitoring calendar, and hold the relationships with the FCA, auditors and key outsourced partners.
The advantages are real:
- Context. They know your people, your product quirks and your history.
- Availability. They are on the floor when a question comes up mid-deal.
- Accountability. A named person is visibly responsible, which matters to the FCA and to your board.
- Culture. A visible compliance presence shapes behaviour in a way an external visitor cannot.
The catch is capacity. One person covering conduct risk, financial crime, complaints, training, regulatory change and reporting is not a compliance function – it is a compliance bottleneck. And in a firm of 2 to 50 staff, that person is usually also doing another job.
The cost comparison
Indicative UK figures for a small or mid-sized regulated firm:
| FCA consultant (retainer) | In-house compliance officer | |
|---|---|---|
| Annual cost | Predictable monthly fee; retainers from around £495 per month | Salary, employer NIC, pension and recruitment, commonly 20 to 30 per cent above headline salary |
| Commitment | Cancellable or renewable as scope changes | Permanent contract and the people-management that comes with it |
| Coverage | Multi-disciplinary team across conduct, AML, risk and change | One person, however broad their experience |
| Ramp-up | Productive within weeks | Two to four months to recruit, then months to learn your business |
| Peak load | Scales up when authorisation, an FCA query or a remediation project lands | Fixed – peaks become overdue work or overtime |
| Regulator-facing independence | Naturally independent | Needs care to evidence genuine challenge |
Salaries for a competent Compliance Officer or MLRO in a small UK firm commonly sit in the region of £50,000 to £80,000 depending on sector and location. Add the employer on-costs and recruitment and the true annual commitment is typically £65,000 to £100,000 before you have bought a single piece of technology. A retainer is a fraction of that, and it buys you a team rather than an individual.
That is not an argument that consultants are cheap and employees are expensive. It is an argument that the two models buy different things, and you should be clear about which one your risk profile actually needs.
Coverage: breadth against depth
An in-house hire gives you depth in one person’s specialism and a general capability everywhere else. If your main exposure is mortgage advice conduct risk and you hire a mortgage compliance specialist, you get excellent cover there and thin cover in financial crime or consumer credit.
A consultancy gives you breadth on tap: the AML specialist for the risk assessment, the authorisation lead for the application, the file-testing lead for the monitoring review. The trade-off is that nobody is permanently in the building.
Ask yourself which failure would hurt more: a control gap nobody noticed because your single officer was too stretched, or a lack of day-to-day presence in the business.
Speed, flexibility and direction of travel
Regulatory demand is lumpy. Authorisation, an FCA query, a change of control, a new product line or a Consumer Duty remediation all arrive as projects. Under a fixed headcount, those projects collide with business as usual. Under a consultancy or retainer, you flex.
Equally, a firm that has just passed 40 staff, taken on regulated permissions across three sectors and started onboarding appointed representatives has probably outgrown external support alone. At some point, presence in the building is the control.
When hiring in-house makes sense
Lean towards an in-house compliance officer when:
- Your regulatory footprint is stable and well understood, and the workload is genuinely full-time
- You need someone in the room daily for decisions, escalations and committee attendance
- You have enough volume to keep a specialist’s skills current
- Your board wants a named, permanently accountable individual on the SMCR map
When an FCA consultant makes sense
Lean towards external FCA consultants when:
- You are pre-authorisation, or preparing an application and need it right first time
- You need an independent review, benchmark or audit that your existing team cannot credibly self-certify
- Your workload is seasonal, project-based or spiky
- Compliance is currently one of three hats worn by a director or COO
- You need specialist capability in a niche area – cryptoassets, payments, consumer credit – that you cannot yet justify as a full-time role
- You want a documented framework, templates and monitoring plan that a future in-house hire can inherit
The hybrid model most small firms settle on
The pragmatic answer for most firms between 2 and 50 staff is neither extreme. It is a retained consultant or consultancy holding the framework, the specialist work and the regulatory change agenda, while a capable internal owner acts as the day-to-day point of contact.
That combination gives you independence where it matters, presence where it matters, and a cost base you can predict. It also means your internal person grows into the role with expert support behind them rather than being dropped in the deep end.
How to decide this quarter
- Map the work. List every compliance task your firm performs in a year and estimate the hours.
- Score the risk. Identify where failure would attract FCA attention, and where you currently have nobody independent looking.
- Price both routes honestly, including on-costs, recruitment and the cost of a delayed project.
- Test the schedule. If three of your top five risks need specialist input you do not have, external support is the shorter path.
If compliance is currently shared across two or three job descriptions and nothing has been independently tested in the last twelve months, that is your answer. Speak to a compliance expert, get a benchmarking review, and put a framework in place before the next FCA touchpoint finds the gaps for you.
