The Enforcement Stain: What Finma's New Aggression Means for the People It Touches

Twelve people just lost their jobs over a pricing error, and most of them will spend the next two years explaining it in interviews they should be winning.

That is the part of the Zurich Insurance story nobody is writing. When Mario Greco confirmed to Bloomberg last week that the group had dismissed "more than 12 employees" following Finma enforcement proceedings, the coverage focused on the sales ban, the corporate life and pensions unit, the roughly CHF 20 million of annual profit now frozen behind a restriction that limits the unit to existing clients. All legitimate. All beside the point for anyone who builds a career in Swiss financial services.

The point is this. Finma enforcement used to be a legal event. It is now a talent event. And the industry has not built the machinery to handle it.

A mundane failure, a public consequence

The facts barely need a paragraph. Clients of Zurich's Swiss corporate life and pensions business were sold heavily tariffed policies at prices below what had been agreed with the regulator. Agreed remediation steps were not implemented. Finma opened proceedings, imposed a partial sales ban, and Zurich dismissed more than a dozen people.

What deserves the paragraph is Greco's own admission: "The regret is that we should have found it ourselves, which we didn't despite all the audits and checks that we do."

Read that sentence from a recruitment desk. The CEO of one of Europe's largest insurers is saying that the full internal control apparatus, the three lines of defence, the audits, the compliance monitoring, failed to catch a pricing deviation on regulated products. The failure was systemic. The dismissals were individual.

That gap, between systemic failure and individual consequence, is where careers go to die. And it is exactly the gap that hiring institutions handle worst.

Finma is not the regulator you remember

If the Zurich case feels unusually muscular, that is because it fits a pattern. Since the collapse of Credit Suisse in 2023, Finma has operated under a simple political reality: it was blamed for being too soft, too slow, and too deferential to the institutions it supervised. The correction has been visible across the market. One major Swiss private banking group is currently blocked from share buybacks while Finma investigates risk-control lapses tied to a high-profile real estate collapse. Monaco's FATF grey-listing episode, which I covered earlier this year, showed the same dynamic in a neighbouring jurisdiction: regulatory pressure converts almost immediately into compliance hiring demand, with budget approvals that would once have taken three quarters clearing in three weeks.

The Zurich case extends the pattern into new territory. This was not money laundering, not sanctions, not a rogue banker. It was product pricing in an insurance unit. If Finma is willing to open public enforcement proceedings and trigger a dozen dismissals over tariff deviations, no control function in Swiss finance can treat enforcement risk as someone else's problem.

The implications run in two directions at once. Demand for senior compliance, risk, and audit professionals keeps climbing, because every board now understands that the cost of a control failure is no longer a fine and a press release. It is a business restriction, a public proceeding, and a talent exodus. But the same aggression that creates demand also creates a new class of damaged candidate.

The enforcement-adjacent candidate

Consider a profile that every recruiter in this market will see more of, and that I have started to see on my own desk. A candidate spent six years in a control function at an institution later subject to enforcement action. They were not named. They were not sanctioned. In some cases they were the person writing the internal memos that flagged the problem. Their CV now carries the institution's name across the exact years the misconduct occurred.

What happens next follows a predictable script. The hiring bank's HR screen sees the institution and the dates, and the application goes into a slower queue. If the candidate reaches an interview, half the conversation is spent on the enforcement action rather than on their actual work. The hiring manager, who often understands the distinction between institutional and personal failure perfectly well, still has to sell the candidate upward to a reputational risk committee that does not.

The result is a market that systematically underprices people from sanctioned institutions, including people whose personal conduct record is spotless and whose crisis experience is precisely what a hiring bank should want. Someone who lived through an enforcement proceeding from inside a control function knows what a remediation programme looks like when it fails. They know which board reporting lines break under pressure. They have seen the difference between a control framework on paper and a control framework at 11pm when the regulator's letter arrives.

That knowledge is expensive to acquire and almost impossible to teach. The banks that learn to assess it, rather than reflexively discounting it, will build stronger second lines than the banks that only hire clean-logo CVs.

How the assessment should actually work

When an enforcement-adjacent profile lands on a mandate, the questions that matter are narrow and factual. What was the candidate's actual scope, and did the failure occur inside it or adjacent to it? What did they document, escalate, or flag before the proceeding, and can any of it be evidenced? Were they interviewed by the regulator, and in what capacity? Did they leave before, during, or after the proceeding, and on whose initiative?

A candidate who escalated in writing and was ignored is not carrying a stain. They are carrying proof of judgement under institutional pressure, which is the single hardest quality to verify in any compliance hire. A candidate who held the pen on the failed control and cannot explain what they would do differently is a different conversation entirely.

The distinction takes perhaps forty minutes of structured interviewing to establish. Most hiring processes never get there, because the institutional name on the CV has already done the sorting.

What the dismissed twelve should do now

For the Zurich twelve, and for everyone who follows them as Finma's tempo continues, the practical playbook matters more than sympathy.

Control the narrative before the market writes it for you. The first version of your story a future employer hears should come from you, in two or three factual sentences, not from a search result surfacing the enforcement coverage. In my experience, candidates who address the elephant in the first five minutes of an interview do consistently better than candidates who wait to be asked.

Document your own record now, while access and memory are fresh. Performance reviews, escalation emails you are entitled to reference, the precise scope of your mandate. Once you have left, reconstructing this becomes ten times harder.

And be precise about what you are selling. The fastest recoveries from enforcement-adjacent exits belong to people who reframe the experience as specialist knowledge. Remediation experience, regulator interaction, crisis-mode governance. These are hiring criteria at every institution that has watched Finma's last three years and drawn the obvious conclusion.

The bigger signal

Zurich's unit will eventually get its sales ban lifted. The profit will resume. The institution absorbs this comfortably.

The twelve individuals absorb it very differently, and the Swiss financial centre should be honest about the asymmetry. A regulator that has decided to enforce visibly, which is its mandate and arguably its duty after 2023, will keep producing enforcement-adjacent professionals at a steady rate. Institutions that treat those people as radioactive will be recruiting from a shrinking pool of the untested. Institutions that learn to read the difference between a stained logo and a stained record will quietly acquire the most battle-tested control talent in the market.

That second group is still small. I expect it to win.

If you are a compliance, risk, or audit professional reassessing your position after this latest round of enforcement news, the EP Portability Score takes five minutes and tells you where you actually stand in the current market: execpartners.ch/portability.