In short: In the UAE, the regulator that licenses the firm decides who counts as a key individual. Onshore CMA firms appoint key persons such as the General Manager, Compliance Officer and MLRO; DIFC and ADGM firms appoint approved individuals for licensed functions. All are assessed as fit and proper before they start.
Three regulators, three regimes
| Regulator | Where it applies | Term used | Typical controlled roles |
|---|---|---|---|
| Capital Market Authority (CMA) | Onshore UAE securities and investment firms | Key persons | General Manager, Compliance Officer, MLRO |
| Dubai Financial Services Authority (DFSA) | Dubai International Financial Centre | Authorised Individuals | Senior Executive Officer, Finance Officer, Compliance Officer, MLRO |
| Financial Services Regulatory Authority (FSRA) | Abu Dhabi Global Market | Approved Persons | Senior Executive Officer, Finance Officer, Compliance Officer, MLRO |
The role is the same in substance everywhere: the regulator wants named, accountable people running the business and its control functions.
Fit and proper expectations
All three regulators assess:
- Integrity – criminal and regulatory history, honesty in past dealings and in the application itself.
- Competence and capability – experience and qualifications relevant to the specific function and the firm's activities.
- Financial soundness – personal financial history, including judgments and insolvency.
- Availability – whether the person can perform the function properly, including residency and other commitments.
For onshore CMA firms, the Compliance Officer and MLRO are expected to be UAE resident, full-time employees of the licensed entity. DIFC and ADGM firms also generally require the Senior Executive Officer, Compliance Officer and MLRO to be resident in the UAE.
Typical qualifications and experience
Candidates for compliance and MLRO roles usually bring at least three years of AML/CFT, compliance or risk experience in a UAE-regulated or comparable financial institution. General Managers and Senior Executive Officers typically have senior management experience in the same type of regulated business. Onshore, key persons may need to pass the regulator's qualifying examinations. Recognised qualifications such as ICA or CISI certificates support a competence case but do not replace the regulator's own assessment.
The approval process
- The firm identifies the candidate and confirms they meet the residency and experience requirements.
- The firm submits the application form for the individual with CV, passport, qualifications, references and police clearance.
- The regulator reviews the file and may interview the candidate, particularly for SEO, Compliance Officer and MLRO roles.
- The individual starts the controlled function only after approval.
Visa and Emirates ID processing usually run in parallel. Read our guide on recruiter vs employer of record for regulated roles if you are hiring before your UAE entity is fully set up.
Indicative salary ranges
The figures below are indicative and depend on the licence, emirate and seniority. See the key individual salary guide for comparisons across jurisdictions.
| Role | Indicative net monthly salary |
|---|---|
| Head of Compliance / MLRO (CMA Category 5) | $6,000–$9,000 + benefits |
Live roles
Open UAE mandates include a Head of Compliance / MLRO for a CMA Category 5 entity and a General Manager for a CMA Category 5 entity. See all roles on the vacancies page.
FAQ
Does the UAE MLRO have to live in the UAE? Yes. For onshore CMA firms the Compliance Officer and MLRO are expected to be UAE resident, full-time employees of the licensed entity.
Is the DFSA process different from the CMA process? The principles are the same, but the DFSA approves Authorised Individuals for licensed functions in the DIFC, while the CMA approves key persons for onshore firms.
Can a key individual be approved before the firm's licence is granted? Key individuals are normally assessed as part of the licence application, so candidates are often identified before the firm is licensed.
Are interviews common? Regulators may interview candidates for senior and control functions, especially the SEO, Compliance Officer and MLRO.
This guide is general information, not legal advice. Confirm current requirements with the relevant regulator.
Sources
- Al Tamimi & Co., UAE capital market regulatory overhaul: key changes from 1 January 2026: tamimi.com
- DFSA Rulebook, General Module (GEN) and Authorised Individuals guidance: dfsa.ae
- FSRA Rulebook, General Rulebook (GEN) on Approved Persons: adgm.com
- HRFinEase salary benchmarks and live mandates, 2026