GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Counsel - Third Party Risk Management

Counsel - Third Party Risk Management

Everest Re Group

Job at a glance

Category
GRC
Work arrangement
On-site
Location
London, UK
Posted
Aug 31, 2026
Apply for this jobApplications go directly to Everest Re Group
Applying today? Most GRC roles fill fast. Get the next ones the day they post, in London, UK.

Free. One click to unsubscribe. We never share your address.

ShareEmailLinkedInXFacebookPrint / Save PDFCopy link

Everest Re Group is hiring a Counsel - Third Party Risk Management in London, UK. This is a GRC job in the governance, risk, and compliance field. Review the full details below and apply directly with Everest Re Group.

Title:

Counsel – Third Party Risk Management (TPRM)

Company:

Everest Advisors (Uk), Ltd.

Job Category:

Law

Job Description:

About Everest:

Everest is a global leader in risk management, rooted in a rich, 50+ year heritage of enabling businesses to survive and thrive, and economies to function and flourish. We are underwriters of risk, growth, progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders, who care deeply about our impact on communities and the wider world.

About the Role:

This role will support the Legal function in managing legal risk arising from the organisation's engagement of vendors, consultants and outsourced service providers. The role combines contract review and negotiation with regulatory horizon scanning and ownership of legal template and playbook management, ensuring the business contracts on appropriately risk-calibrated terms and remains ahead of regulatory developments affecting third party risk.

Key Responsibilities

Contract Review and Negotiation

• Review, draft and negotiate vendor, consultant, outsourcing, TOBAS and non-disclosure agreements, applying the organisation's risk appetite and standard positions

• Apply proportionate legal review calibrated to contract risk tier (e.g. material outsourcing vs. low-risk vendor arrangements), including under applicable outsourcing/operational resilience regulatory frameworks (e.g. PRA/FCA outsourcing rules, EIOPA/Solvency II outsourcing requirements, DORA where relevant)

• Liaise with procurement, information security, data protection and business stakeholders to ensure contracts reflect operational, security and regulatory requirements

• Identify and escalate contracts raising material legal, regulatory or reputational risk

• Support due diligence and contractual remediation for existing third-party arrangements

Regulatory Horizon Scanning

• Monitor and summarise regulatory developments relevant to third party risk management, outsourcing and operational resilience (UK and Ireland), including PRA, FCA, Central Bank of Ireland, EIOPA and Lloyd's requirements

• Produce concise, business-facing briefings on incoming regulatory change and its practical impact on contracting and vendor oversight practices

• Track implementation deadlines and support the legal team in embedding regulatory changes into templates, playbooks and processes

Template and Playbook Management

• Own and maintain the suite of TPRM-related legal templates (vendor agreements, consultancy agreements, outsourcing clauses, DORA clauses, NDAs) and associated negotiation playbooks

• Keep templates current with regulatory change, business requirements and lessons learned from negotiations

• Support training and guidance materials for procurement and business teams on template use and escalation triggers

General

• Maintain accurate records of contract review status, risk logs and regulatory tracking within the team's systems

• Contribute to continuous improvement of TPRM legal processes, including standardisation and efficiency initiatives

Candidate Profile

• Qualified lawyer (England & Wales) with at least 1-year PQE or an experienced paralegal with demonstrable relevant commercial contract experience

• Experience reviewing and negotiating commercial contracts

• Familiarity with and willingness to develop expertise in, financial services/insurance regulatory frameworks relevant to outsourcing and third-party risk (e.g. PRA/FCA outsourcing rules, operational resilience, Solvency II)

• Strong drafting and negotiation skills, with the ability to work efficiently against a high contract volume

• Good research and summarisation skills, with the ability to translate legal/regulatory developments into practical guidance

• Highly organised, with strong attention to detail and comfort managing template libraries and structured processes

• Confident communicator, able to work directly with procurement, risk, information security and business stakeholders

• Reinsurance sector experience an advantage but not essential

What if I don’t meet every requirement? At Everest we are dedicated to building an inclusive and authentic workplace. So, if you are excited about this role but your past experience doesn’t align perfectly with every element in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Please let us know if you need any accommodations throughout the application or interview process.

Our Culture

At Everest, our purpose is to provide the world with protection. We help clients and businesses thrive, fuel global economies, and create sustainable value for our colleagues, shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviors. Click here to learn more about our culture.

• Our Values are the guiding principles that inform our decisions, actions and behaviors. They are an expression of our culture and an integral part of how we work: Talent. Thoughtful assumption of risk. Execution. Efficiency. Humility. Leadership. Collaboration. Inclusion and Belonging.

• Our Colleague Behaviors define how we operate and interact with each other no matter our location, level or function: Respect everyone. Pursue better. Lead by example. Own our outcomes. Win together.

All colleagues are held accountable to upholding and supporting our values and behaviors across the company. This includes day to day interactions with fellow colleagues, and the global communities we serve.

Type:

Regular

Time Type:

Full time

Primary Location:

London

Additional Locations:

Privacy Notice | Everest (everestglobal.com)

Full responsibilities and requirements are on Everest Re Group's application page.

Apply for this job →
About Everest Re Group
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Everest Re Group jobs →

Location and market context

This job is based in London, UK on-site. Local candidates benefit from being close to Everest Re Group's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About third-party risk jobs

Third-party and vendor risk teams assess and monitor the security, privacy, and compliance posture of suppliers, an area under sharp regulatory and operational focus as AI vendors proliferate. Jobs like this one are typically evaluated against frameworks such as third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices.

How to position yourself for this third-party risk job

Strong candidates emphasize vendor due diligence and assessment, ongoing monitoring, contract and control requirements, and coordinating across security, privacy, and procurement. In your resume and outreach, tie your experience to how Everest Re Group would apply third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Central Outsourcing Control Office (COCO)
Morgan Stanley
Frankfurt, Germany
Risk Business Partner - Third Party Risk Management
FNZ
Edinburgh, UK
Supervisor, IT Security Vendor Risk Management
Raymond James
St. Petersburg, FL
Senior Director, AML & Sanctions, Governance & Policy
Airwallex
London, UK
Head of Risk Operations
Airwallex
London, UK
Managing Principal (Director) - Financial Crime Transformation - AML Investigations, Sanctions & Fraud
Capco
London, UK
Get more jobs like this by email
We will email you new GRC jobs in London, UK as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location

Need help applying for this job?

Most people send the same résumé to forty roles and hear nothing. These three do something about that.

Free
Career Intelligence tools
Five AI tools: rank your matches, see what the role really demands, find the recruiter behind the posting, build an interview-ready company brief, and know your number before they ask.
Use the free tools →
$75
Résumé review by a GRC professional
A working GRC professional reads it line by line: what clears the ATS, what a hiring manager actually looks for, and which of your experience you are underselling.
Book a résumé review →
$75/hr
Coaching through your search
Someone who has run executive searches for 28 years, working your actual search with you: targeting, positioning, interviews and negotiation.
Book a coaching session →

Free tools need no account. Paid services are delivered by a person, not a template.