Counsel – Third Party Risk Management (TPRM)

About Everest: Everest is a global leader in risk management, rooted in a rich, 50+ year heritage of enabling businesses to survive and thrive, and economies to function and flourish. We are underwriters of risk, growth, progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders, who care deeply about our impact on communities and the wider world.

About the Role: This role will support the Legal function in managing legal risk arising from the organisation's engagement of vendors, consultants and outsourced service providers. The role combines contract review and negotiation with regulatory horizon scanning and ownership of legal template and playbook management, ensuring the business contracts on appropriately risk-calibrated terms and remains ahead of regulatory developments affecting third party risk.

Key Responsibilities

• Contract Review and Negotiation
  • Review, draft and negotiate vendor, consultant, outsourcing, TOBAS and non-disclosure agreements, applying the organisation's risk appetite and standard positions.
  • Apply proportionate legal review calibrated to contract risk tier (e.g. material outsourcing vs. low-risk vendor arrangements), including under applicable outsourcing/operational resilience regulatory frameworks (e.g. PRA/FCA outsourcing rules, EIOPA/Solvency II outsourcing requirements, DORA where relevant).
  • Liaise with procurement, information security, data protection and business stakeholders to ensure contracts reflect operational, security and regulatory requirements.
  • Identify and escalate contracts raising material legal, regulatory or reputational risk.
  • Support due diligence and contractual remediation for existing third-party arrangements.
• Regulatory Horizon Scanning
  • Monitor and summarise regulatory developments relevant to third party risk management, outsourcing and operational resilience (UK and Ireland), including PRA, FCA, Central Bank of Ireland, EIOPA and Lloyd's requirements.
  • Produce concise, business-facing briefings on incoming regulatory change and its practical impact on contracting and vendor oversight practices.
  • Track implementation deadlines and support the legal team in embedding regulatory changes into templates, playbooks and processes.
• Template and Playbook Management
  • Own and maintain the suite of TPRM-related legal templates (vendor agreements, consultancy agreements, outsourcing clauses, DORA clauses, NDAs) and associated negotiation playbooks.
  • Keep templates current with regulatory change, business requirements and lessons learned from negotiations.
  • Support training and guidance materials for procurement and business teams on template use and escalation triggers.
• General
  • Maintain accurate records of contract review status, risk logs and regulatory tracking within the team's systems.
  • Contribute to continuous improvement of TPRM legal processes, including standardisation and efficiency initiatives.

Candidate Profile

• Qualified lawyer (England & Wales) with at least 1-year PQE or an experienced paralegal with demonstrable relevant commercial contract experience.
• Experience reviewing and negotiating commercial contracts.
• Familiarity with and willingness to develop expertise in financial services/insurance regulatory frameworks relevant to outsourcing and third-party risk (e.g. PRA/FCA outsourcing rules, operational resilience, Solvency II).
• Strong drafting and negotiation skills, with the ability to work efficiently against a high contract volume.
• Good research and summarisation skills, with the ability to translate legal/regulatory developments into practical guidance.
• Highly organised, with strong attention to detail and comfort managing template libraries and structured processes.
• Confident communicator, able to work directly with procurement, risk, information security and business stakeholders.
• Reinsurance sector experience an advantage but not essential.

What if I don’t meet every requirement? At Everest we are dedicated to building an inclusive and authentic workplace. So, if you are excited about this role but your past experience doesn’t align perfectly with every element in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. Please let us know if you need any accommodations throughout the application or interview process.

Our Culture: At Everest, our purpose is to provide the world with protection. We help clients and businesses thrive, fuel global economies, and create sustainable value for our colleagues, shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviours.

Our Values

• Talent.
• Thoughtful assumption of risk.
• Execution.
• Efficiency.
• Humility.
• Leadership.
• Collaboration.
• Inclusion and Belonging.

Our Colleague Behaviors

• Respect everyone.
• Pursue better.
• Lead by example.
• Own our outcomes.
• Win together.

All colleagues are held accountable to upholding and supporting our values and behaviours across the company. This includes day to day interactions with fellow colleagues, and the global communities we serve.