Jobs › Counsel - Third Party Risk Management
Counsel - Third Party Risk Management
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- London, UK
- Posted
- Aug 31, 2026
Free. One click to unsubscribe. We never share your address.
Everest Re Group is hiring a Counsel - Third Party Risk Management in London, UK. This is a GRC job in the governance, risk, and compliance field. Review the full details below and apply directly with Everest Re Group.
Title:
Counsel – Third Party Risk Management (TPRM)
Company:
Everest Advisors (Uk), Ltd.
Job Category:
Law
Job Description:
About Everest:
Everest is a global leader in risk management, rooted in a rich, 50+ year heritage of enabling businesses to survive and thrive, and economies to function and flourish. We are underwriters of risk, growth, progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders, who care deeply about our impact on communities and the wider world.
About the Role:
This role will support the Legal function in managing legal risk arising from the organisation's engagement of vendors, consultants and outsourced service providers. The role combines contract review and negotiation with regulatory horizon scanning and ownership of legal template and playbook management, ensuring the business contracts on appropriately risk-calibrated terms and remains ahead of regulatory developments affecting third party risk.
Key Responsibilities
Contract Review and Negotiation
• Review, draft and negotiate vendor, consultant, outsourcing, TOBAS and non-disclosure agreements, applying the organisation's risk appetite and standard positions
• Apply proportionate legal review calibrated to contract risk tier (e.g. material outsourcing vs. low-risk vendor arrangements), including under applicable outsourcing/operational resilience regulatory frameworks (e.g. PRA/FCA outsourcing rules, EIOPA/Solvency II outsourcing requirements, DORA where relevant)
• Liaise with procurement, information security, data protection and business stakeholders to ensure contracts reflect operational, security and regulatory requirements
• Identify and escalate contracts raising material legal, regulatory or reputational risk
• Support due diligence and contractual remediation for existing third-party arrangements
Regulatory Horizon Scanning
• Monitor and summarise regulatory developments relevant to third party risk management, outsourcing and operational resilience (UK and Ireland), including PRA, FCA, Central Bank of Ireland, EIOPA and Lloyd's requirements
• Produce concise, business-facing briefings on incoming regulatory change and its practical impact on contracting and vendor oversight practices
• Track implementation deadlines and support the legal team in embedding regulatory changes into templates, playbooks and processes
Template and Playbook Management
• Own and maintain the suite of TPRM-related legal templates (vendor agreements, consultancy agreements, outsourcing clauses, DORA clauses, NDAs) and associated negotiation playbooks
• Keep templates current with regulatory change, business requirements and lessons learned from negotiations
• Support training and guidance materials for procurement and business teams on template use and escalation triggers
General
• Maintain accurate records of contract review status, risk logs and regulatory tracking within the team's systems
• Contribute to continuous improvement of TPRM legal processes, including standardisation and efficiency initiatives
Candidate Profile
• Qualified lawyer (England & Wales) with at least 1-year PQE or an experienced paralegal with demonstrable relevant commercial contract experience
• Experience reviewing and negotiating commercial contracts
• Familiarity with and willingness to develop expertise in, financial services/insurance regulatory frameworks relevant to outsourcing and third-party risk (e.g. PRA/FCA outsourcing rules, operational resilience, Solvency II)
• Strong drafting and negotiation skills, with the ability to work efficiently against a high contract volume
• Good research and summarisation skills, with the ability to translate legal/regulatory developments into practical guidance
• Highly organised, with strong attention to detail and comfort managing template libraries and structured processes
• Confident communicator, able to work directly with procurement, risk, information security and business stakeholders
• Reinsurance sector experience an advantage but not essential
What if I don’t meet every requirement? At Everest we are dedicated to building an inclusive and authentic workplace. So, if you are excited about this role but your past experience doesn’t align perfectly with every element in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Please let us know if you need any accommodations throughout the application or interview process.
Our Culture
At Everest, our purpose is to provide the world with protection. We help clients and businesses thrive, fuel global economies, and create sustainable value for our colleagues, shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviors. Click here to learn more about our culture.
• Our Values are the guiding principles that inform our decisions, actions and behaviors. They are an expression of our culture and an integral part of how we work: Talent. Thoughtful assumption of risk. Execution. Efficiency. Humility. Leadership. Collaboration. Inclusion and Belonging.
• Our Colleague Behaviors define how we operate and interact with each other no matter our location, level or function: Respect everyone. Pursue better. Lead by example. Own our outcomes. Win together.
All colleagues are held accountable to upholding and supporting our values and behaviors across the company. This includes day to day interactions with fellow colleagues, and the global communities we serve.
Type:
Regular
Time Type:
Full time
Primary Location:
London
Additional Locations:
Privacy Notice | Everest (everestglobal.com)
Full responsibilities and requirements are on Everest Re Group's application page.
Apply for this job →Location and market context
This job is based in London, UK on-site. Local candidates benefit from being close to Everest Re Group's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About third-party risk jobs
Third-party and vendor risk teams assess and monitor the security, privacy, and compliance posture of suppliers, an area under sharp regulatory and operational focus as AI vendors proliferate. Jobs like this one are typically evaluated against frameworks such as third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices.
How to position yourself for this third-party risk job
Strong candidates emphasize vendor due diligence and assessment, ongoing monitoring, contract and control requirements, and coordinating across security, privacy, and procurement. In your resume and outreach, tie your experience to how Everest Re Group would apply third-party risk frameworks, SOC 2, ISO/IEC 27001, and vendor due-diligence and monitoring practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location