Every compliance recruiter gets some version of the same question from a second-year AML analyst: how long until I stop clearing alerts and start running the program. The honest answer is longer than most people want to hear, and it hinges on a short list of decisions that get made early and rarely get revisited. Having placed people at every rung of this ladder, the pattern holds more consistently than the job postings suggest β€” titles differ by bank, but the actual gates between levels do not.

The ladder itself is not complicated: analyst, senior analyst, manager, then MLRO or Head of Compliance. What is complicated, and what almost nobody explains to the person climbing it, is what actually triggers each move. Two analysts can start on the same day, do work that looks nearly identical on paper, and five years later be two full levels apart. The difference is rarely a skills gap. It is almost always about what each of them was put in front of, and what they did with it.

The Ladder, As It Actually Runs

An analyst clears alerts and writes the narratives that go into a SAR file. A senior analyst does the same work but is trusted to make the judgment call on ambiguous alerts without a second reviewer, and is usually the one training new hires. The jump to manager is the real inflection point: it is the first time the job stops being about an individual case queue and starts being about a team's output, a testing calendar, or a piece of the regulatory relationship. MLRO and Head of Compliance are ownership roles β€” the person whose name is on the program when an examiner asks who is accountable.

The timeframes vary by institution and by how thin the team is, but two to three years in a role before the next move is a reasonable rule of thumb at the analyst and senior analyst levels. The jump from senior analyst to manager takes longer on average, and it is where the largest number of careers get stuck, for reasons that have very little to do with how good the work is.

The Lateral Moves That Actually Accelerate You

The fastest paths up this ladder are rarely straight lines. A KYC analyst who moves into AML transaction monitoring brings a documentation discipline that most AML-only analysts never develop, and it shows immediately in how clean their case files are. A risk analyst who moves into compliance brings a way of thinking about likelihood and impact that most compliance-only candidates have to be taught from scratch. An internal auditor who moves into compliance already knows how to write a finding that survives a second-line challenge, which is most of what a manager's job actually is.

None of these moves are automatic, and none of them work as a resume line alone. What makes a lateral move read as an accelerant instead of a restart is a hiring manager's confidence that the underlying skill β€” investigative rigor, control testing, root-cause analysis β€” transfers directly, and that confidence has to be built into how the move gets framed before the resume is ever sent.

Where People Actually Stall

The most common stall point in this business is not a skills gap. It is scope. An analyst who has spent four years doing excellent work inside a narrow lane β€” one product line, one alert type, one region β€” can be genuinely excellent at that lane and still be invisible for the manager role, because nobody above them has ever seen them handle ambiguity outside of it. Promotion committees do not promote people on the strength of what they have already proven. They promote on the strength of what they are confident someone can do that they have not yet been asked to do, and a narrow lane rarely produces that confidence.

The second most common stall is staying too long in a program that is not growing. A compliance function that is stable β€” no recent exam findings, no consent order, no new regulatory mandate β€” has very little reason to create a new manager seat. The best analysts in a stable program are often the most stuck, precisely because they are too valuable to move and there is no seat opening up to move them into.

The people who get stuck are almost never the weakest performers. They are the strongest performers in a program that stopped changing, which is a much harder problem to see from the inside. β€” Ronen Brainin

What Separates A Three-Year Analyst From A Three-Year Manager

Tenure alone explains surprisingly little of the gap between two people at very different levels after the same number of years. What separates them is usually exposure to a live event β€” an exam, a lookback, a consent order, a system conversion β€” and what role that person played in it. An analyst who sat inside a lookback and only worked the assigned case list learned the mechanics. An analyst who was pulled into the room where the sampling methodology got argued over, or who briefed a finding upward, learned how the decision actually gets made. That second experience is what a promotion committee is really testing for, whether the job posting says so or not.

This is also why volunteering for the unglamorous, high-visibility work β€” an exam prep, a remediation plan, a system migration nobody wants to own β€” moves careers faster than doing the core job exceptionally well in a quiet quarter. The core job is what gets you hired. The visible, high-stakes work is what gets you promoted.

When To Push For The Promotion And When To Leave

The honest test is whether the seat actually exists to be pushed into. If the program is growing, has recently absorbed a new mandate, or is short-staffed relative to its exam calendar, pushing internally is usually the faster and lower-risk path, because the institution already needs the seat filled and knows the candidate. If the program is flat and has been flat for two review cycles, an internal push is usually a request to create a role that does not need to exist yet, and it tends to go nowhere no matter how strong the case.

In that second situation, a lateral move to an institution mid-remediation, mid-exam, or actively building out a new function is almost always the faster route to the next title, even though it feels like more risk on paper. An empty seat that a bank urgently needs to fill moves faster than a seat a bank has to be convinced to create.

What To Take From This

  • The gates between levels are about scope and visible exposure to a live event, not tenure or raw skill.
  • Lateral moves from KYC, risk or audit into AML/compliance can accelerate you, but only if the transferable skill is framed explicitly, not left implied.
  • The strongest analysts in a stable program are often the most stuck β€” there is no seat opening up to move them into.
  • Before pushing for an internal promotion, ask whether the seat actually needs to exist yet. If it doesn't, a lateral move to a growing or remediating program usually moves faster.

The Certification Question, Briefly

Certifications come up constantly in these conversations, and the honest answer is that they matter less at the point of hire than most candidates assume, and more at the point of promotion than most candidates expect. A credential like CAMS rarely gets an analyst an interview on its own. It does, however, function as a credibility signal at the manager conversation, where a promotion committee is looking for anything that suggests the person has invested in the function beyond their own case queue. Which specific certification is worth that investment, and for whom, is its own question β€” one with a real answer instead of the usual answer from whoever is selling the exam prep.