None of it's in the job description; all of it's the job

Published

Two people sit at a desk with colorful, tabbed documents. The woman smiles while the man looks perplexed. A laptop is also on the desk.

Look at a live job description for a COLP, an MLRO or a head of risk and compliance, and it says the same things: maintain the firm's anti-money laundering (AML) framework, oversee client due diligence, keep a register of compliance failures, report serious breaches to the board. We checked. That genuinely is what it says.

What it doesn't say: chasing a client for the third time, or losing an afternoon moving the same details between two systems that were never built to talk to each other. Those bits aren't a footnote: they're a big part of the job.

The real job lives in the gaps between those bullet points. It's quiet, constant work, holding together a process that was never really built to hold itself.

What the description leaves out

The description says "oversee client due diligence." In practice, that's chasing the same client a third time for a document because the first version wasn't in a usable format, and by the time a replacement arrived, their ID document was out of date, so the whole thing starts again.

It's taking a client's name, date of birth and address from one system and typing them into a second, because the two were never built to pass anything between them. It's carrying the picture of where every open file has got to, not in a report, but in your own head, or, in a larger firm, spread across a team's heads, because there's nowhere better for it to live.

That's the busywork, the legwork that quietly eats into the time that should go on judgement. An example we heard on our VERIFIED 2026 Compliance panel captures it well. A consultant described a firm whose case management system already had the functionality to flag a file the moment it was missing the right due diligence, before the matter could move any further.

Nobody there had been told it could do that: the update had landed as one more line in a vendor email, on top of everything else already competing for attention that week. So a spreadsheet was created and updated by hand instead, and within a few months, people were checking that spreadsheet every day rather than the system that could have done it for them. That's how the real job grows. Not because anyone dropped the ball. Because a genuinely useful update got lost in the noise of everything else already on their plate.

Why it lands on one desk

There's usually one person who knows how the whole thing actually fits together. Maybe that's you: the COLP, the MLRO, or simply whoever's ended up holding the compliance brief on top of everything else, since in most firms that's rarely just one job title. The one who's been there longest, or simply the one everyone has learned to ask. When a fee earner isn't sure whether a check is needed, they ask you. When a risk decision is finely balanced, it routes to you. When the regulator's expectations shift, you're the one reading the guidance and working out what it means for the firm.

None of that is delegation gone wrong. It happens because nothing in most firms' current setup is smart enough to catch the routine stuff itself, flag what doesn't look right, and point you towards the handful of cases that actually need your judgement. Right now, the tedious, in-between work and the genuinely difficult calls both land on the same desk, because nothing sorts one from the other before it reaches you.

And if any of this sounds familiar, that isn't a sign you're doing something wrong. It's a sign the job grew around you because you were good at it, and nothing has been built yet to take the routine weight back off, so more of your time can go where it should: the calls only you can make.

The dependency isn't fair on you

Here's the part that's easy to admire and dangerous to rely on. When a firm's compliance runs on one person's memory, one spreadsheet and one person's willingness to stay late, it can look like resilience, right up until that person takes leave, is off sick, or moves on. The gap was always there; the firm just stopped noticing, because the person filling it never complained and never let anything drop. And it lands hardest on the very people it depends on most: the more capable you are, the more finds its way to you, and the harder it becomes to ever put any of it down.

What the numbers say, and what's happening right now

Last year, we asked 150 senior compliance leaders about exactly this in our own research, the UK Compliance Paradox. 42% already work overtime at least once a week just to keep up. The harder number to sit with: 51% feel compliance isn't respected within their firm, and only 15% believe their work is seen as critical and valued.

Those numbers explain something we heard directly, too. On our Compliance Unfiltered webinar this year, Thirdfort's in-house compliance expert, Harriet Holmes, talked about why so much of this stays invisible: "It's like an invisible success… if you're not getting complaints, that means your controls are effective, that means things are working how they were designed to work. And that's a real positive, but celebrating that win is not quite as easy as… bringing in a new client to the business, or being able to bill a certain amount of hours."

It's like an invisible success… if you're not getting complaints, that means your [compliance] controls are effective.

Harriet Holmes, Thirdfort

None of that shows up in an appraisal, and none of it changes until the systems around the job catch up with what the job has actually become.

What actually helps, before anything else

You don't need heroics to fix this, and you don't need new software to start looking. A few places worth checking first: where has a spreadsheet, a shared inbox or a personal system quietly become a single point of failure? What's written down only in your head, and would take someone else days to reconstruct? And where are your existing tools already capable of more than you're using them for, the way that case management functionality above was sitting there the whole time, unused?

Once you can see it, closing the gap doesn't have to start from nothing, and it doesn't have to start with you doing more of it. We built our platform because this is exactly the pattern we kept hearing about: a system that takes on the routine legwork, flags what actually needs a second look, and leaves your time for the judgement calls that were always meant to be yours. Intelligent client due diligence, with you in control.

No more workarounds

The job was never the highlighting, the re-keying and the chasing. Those grew up around the job while nobody was looking. The job is the judgement, and the firms that do this well are the ones that free their people to spend their time there.

If you want the fuller story of how the workarounds pile up in the first place, we wrote about that here. And if any of this felt a little too familiar, it's worth seeing what the work looks like without them.

Intelligent client due diligence

See what your process could look like without the workarounds. We're ready when you are.

Subscribe to our newsletter

Subscribe to our monthly newsletter for recaps and recordings of our webinars, invitations for upcoming events and curated industry news. We’ll also send our guide to Digital ID Verification as a welcome gift.

Our Privacy Policy sets out how the personal data collected from you will be processed by us.

Related articles