Question about Career Paths

I've been working on a project with an academic who is working for a think tank who is in turn (I think) "working" for the SEC. This academic has a undergrad student who will be doing his thesis with this advisor next year. He is a double major in finance and pre-law. Since I once upon a time worked in compliance investigations. This student is looking for career advice regarding getting into compliance. But I am the wrong person to ask as I just sort of fell into it by accident after doing a short stint as an analyst for a fund.
This guy is telling me that OCS isn't inviting compliance departments hand over fist. Anyone know this typical path to banking compliance? AML/KYC/BSA/OCC/OFAC/ now FCPA (and other transactional due diligence?)
I did disputes and M&A due diligence and thought it was probably the best job ever. But I was young and got lucky as it was put in front of me. And the people I worked with had a whole variety of paths - credit risk, financial due diligence and IB, a litigation associate or two and an investigative journalist even. I'm wondering what the most standard approach is.