Repeated compliance mistakes lead SEC to order firm to hire a CCO