CCO told he can’t oversee compliance after SEC enforcement settlement