Introduction
At Gallagher, we help clients face risk with confidence because we believe that when businesses are protected, they're free to grow, lead, and innovate. You'll be backed by our digital ecosystem: a client-centric suite of consulting tools making it easier for you to meet your clients where they want to be met. Advanced data and analytics providing a comprehensive overview of the risk landscape is at your fingertips. Here, you're not just improving clients' risk profiles, you're building trust. You'll find a culture grounded in teamwork, guided by integrity, and fueled by a shared commitment to do the right thing. We value curiosity, celebrate new ideas, and empower you to take ownership of your career while making a meaningful impact for the businesses we serve. If you're ready to bring your unique perspective to a place where your work truly matters; think of Gallagher.
Overview
The Risk Manager - Contracts & Compliance is responsible for overseeing and advancing the organization's enterprise risk management strategy within a third-party administration (TPA) environment supporting health and welfare benefit plans. This role provides expert leadership across regulatory compliance, fiduciary risk, operational risk, and vendor oversight, while serving as a trusted advisor to executive leadership, boards, and external partners.
The ideal candidate brings a minimum of eight (8) years of progressive risk management experience within a TPA or health and welfare benefits environment, with demonstrated expertise in compliance, plan governance, and complex stakeholder management.
How you'll make an impact
Enterprise & Operational Risk Management
- Develop, implement, and maintain a comprehensive risk management framework tailored to health and welfare benefit plans administered by the organization.
- Identify, assess, and mitigate enterprise, operational, fiduciary, regulatory, and reputational risks.
- Maintain risk registers, mitigation plans, and reporting mechanisms aligned with best practices.
- Regulatory & Compliance Oversight
- Ensure compliance with applicable federal and state regulations, including but not limited to ERISA, ACA, HIPAA, COBRA, CMS guidance, and DOI requirements.
- Partner with internal teams and external counsel to monitor regulatory changes and assess organizational impact.
- Lead or support audits, examinations, and regulatory inquiries, including corrective action planning.
Fiduciary & Plan Governance Support
- Advise trustees, boards, and plan sponsors on fiduciary obligations, risk exposure, and governance best practices.
- Prepare and present risk and compliance updates for board meetings, committees, and executive leadership.
- Support policy development, documentation standards, and governance controls.
Vendor & Third-Party Risk Management
- Oversee vendor risk assessments, contract compliance, and performance monitoring.
- Collaborate with procurement, legal, and operational teams to evaluate vendor controls and service-level adherence.
- Support contract lifecycle management (CLM) processes related to risk and compliance provisions.
- Incident Management & Issue Resolution
- Lead investigation and resolution of compliance incidents, data breaches, operational failures, or member escalations with potential risk exposure.
- Ensure timely documentation, root-cause analysis, and implementation of corrective actions.
- Coordinate with IT, legal, HR, and communications teams as needed.
Leadership & Cross-Functional Collaboration
- Serve as a subject-matter expert and strategic partner to operations, IT, finance, legal, and client-facing teams.
- Provide guidance, training, and mentorship related to risk awareness and compliance best practices.
- Contribute to continuous improvement initiatives, process enhancements, and organizational readiness.
About You
- Bachelor's degree in Risk Management, Business Administration, Finance, Healthcare Administration, or a related field (Master's preferred).
- Minimum eight (8) years of experience in risk management, compliance, or governance within a third-party administration (TPA) environment supporting health and welfare benefits.
- Deep working knowledge of health and welfare benefit plan operations and regulatory requirements.
- Proven experience supporting boards, trustees, or executive leadership in a fiduciary or regulated environment.
- Strong analytical, documentation, and risk assessment skills.
- Exceptional written and verbal communication skills, including executive-level and board-level presentations.
Preferred Qualifications
- Professional certifications such as CRMP, CCEP, CHPC, CHC, or similar.
- Experience with enterprise risk management (ERM) or GRC frameworks.
- Familiarity with contract lifecycle management (CLM) systems and third-party vendor risk programs.
- Experience leading or supporting audits and regulatory reviews.
- Prior people-management or project leadership experience.
Core Competencies