In short: CySEC expects the people who direct and control a Cyprus Investment Firm to be of good repute, suitably qualified and able to commit enough time to the role. Key function holders are assessed before they take office, and the compliance and AML roles also require CySEC certification.
What a key individual is in Cyprus
CySEC does not use "key individual" as a single legal title. In practice the term covers the people whose appointment the regulator assesses: executive and non-executive directors, the persons who effectively direct the business, and the holders of key functions such as Compliance Officer, Anti-Money Laundering Compliance Officer (AMLCO), Risk Manager and Head of Internal Audit.
These people carry personal responsibility. If the firm breaches its obligations, CySEC can look at whether the individuals who ran the relevant function acted with due skill, care and diligence.
Fit and proper expectations
CySEC applies the European suitability framework used across the EU. The assessment looks at four areas:
- Reputation, honesty and integrity – criminal records, regulatory sanctions, disciplinary proceedings and past insolvencies.
- Knowledge, skills and experience – relevant to the firm's licence, products and client base.
- Independence of mind – conflicts of interest, other directorships and close links.
- Time commitment – whether the person can devote enough time to the role alongside other positions.
The firm must also show that its management body, taken together, has the collective knowledge to understand the business and its risks. At least two people must effectively direct the business, which is often called the "four-eyes" principle.
Typical qualifications and experience
| Role | Typical background | Certification |
|---|---|---|
| Executive director / CEO | Senior management in a regulated investment firm | Not role-specific |
| Compliance Officer | Compliance or legal experience in MiFID II firms | CySEC Advanced Certificate |
| AMLCO | AML/CFT experience in a regulated financial institution | CySEC AML Certificate |
| Risk Manager | Market, credit or operational risk in financial services | Relevant degree or professional qualification |
| Head of Dealing / Back Office | Trading operations at a CIF or broker | Advanced Certificate where the role involves investment services |
Most candidates for senior control functions hold a degree in law, finance, economics or a related subject, and several years of experience in an EU-regulated environment.
The approval process
The firm notifies CySEC of the proposed appointment and submits a personal questionnaire with supporting documents for the candidate: CV, criminal record certificate, bankruptcy certificate, references and proof of certification. CySEC reviews the file, may ask follow-up questions and can invite the candidate for an interview. The appointment should not take effect before CySEC has completed its assessment.
Plan for the assessment in your hiring timeline. Our guide on how long it takes to hire an MLRO for a CySEC or CMA licence covers typical timing.
Indicative salary ranges
Ranges below are indicative net monthly figures for Cyprus in 2026 and vary with licence type, firm size and seniority. See the key individual salary guide for a cross-jurisdiction comparison.
| Role | Indicative net monthly salary |
|---|---|
| Compliance Officer (mid-level) | €3,500–€5,500 |
| Compliance Officer (senior) | €5,500–€8,000 |
| Chief Compliance Officer | €8,000–€12,000 |
Live roles
Current Cyprus mandates include a Head of Back Office for a MiFID II CySEC firm and a Head of Legal for an FX/CFD broker. All open roles are on the vacancies page.
FAQ
Does CySEC approve compliance officers before they start? CySEC assesses the suitability of key function holders, and the appointment should not take effect before that assessment is complete.
Which certificate does a Cyprus compliance officer need? The CySEC Advanced Certificate. The AMLCO needs the CySEC AML Certificate.
Can one person be both Compliance Officer and AMLCO? It depends on the size and nature of the firm. CySEC looks at whether the combination allows each function to be carried out properly.
Does a key individual have to live in Cyprus? Persons who effectively direct the business are generally expected to be based in Cyprus so they can run the firm day to day.
This guide is general information, not legal advice. Confirm current requirements with CySEC or your legal adviser.
Sources
- Cyprus Investment Services and Activities and Regulated Markets Law, Law 87(I)/2017
- ESMA and EBA Joint Guidelines on the assessment of the suitability of members of the management body and key function holders
- CySEC certification examinations: cysec.gov.cy
- HRFinEase salary benchmarks and live mandates, 2026