Concentrix acquires GRC firm CastleHill
- Concentrix acquired CastleHill Managed Risk Solutions
- CastleHill provides GRC and third-party risk management services
- Financial terms were not disclosed
- Concentrix’s delivery network spans more than 40 countries
NEWARK, UNITED STATES — Concentrix Corporation has acquired CastleHill Managed Risk Solutions, a provider of governance, risk, and compliance (GRC) services to banking, financial services, and manufacturing enterprises.
The acquisition brings CastleHill’s GRC-as-a-Service model and third-party risk management (TPRM) capabilities into Concentrix’s risk and compliance division; financial terms were not disclosed.
Deal deepens Concentrix risk and compliance line
According to a report from GlobeNewswire, Concentrix said the acquisition adds greater depth and scale to its risk and compliance business, which the company described as one of its fastest-growing specialized lines.
CastleHill, co-founded by Tim Carbery and Michael Duggan, operates a services model that combines people, process, and technology across financial crime operations management, cybersecurity, and artificial intelligence (AI) governance.
The firm serves clients in banking, financial services, and manufacturing, sectors where regulators in the United States and globally are tightening obligations around third-party vendor risk.
“Risk and Compliance is one of our fastest-growing specialized business lines, and CastleHill gives us even greater depth and scale,” said Chris Caldwell, president and chief executive officer at Concentrix.
CastleHill co-founders cite global scale advantage
With the acquisition complete, CastleHill’s team and client relationships join Concentrix’s delivery network, which spans more than 40 countries.
CastleHill had built its practice around regulated industries where AI governance and third-party risk exposure are emerging pressure points for compliance and risk officers.
The deal adds specialized GRC expertise to Concentrix’s business process outsourcing (BPO) portfolio at a time when enterprise clients across banking and insurance are outsourcing compliance functions to meet accelerating regulatory demands.
“Joining Concentrix combines that expertise with global scale, expanded capabilities,” said Tim Carbery and Michael Duggan, co-founders of CastleHill.
The BPO sector has seen a wave of compliance-focused acquisitions through 2025 and 2026, as regulators across the U.S. and European Union tighten oversight of third-party vendors in banking, financial services, and technology verticals.
For enterprise buyers in banking and manufacturing evaluating third-party risk outsourcing, the deal signals that large, full-service BPO providers are building GRC and TPRM capabilities as core offerings rather than niche add-ons.
With CastleHill’s GRC-as-a-Service model, AI governance expertise, and TPRM practice now embedded in its portfolio, Concentrix is positioned to compete for enterprise compliance mandates at a scale CastleHill could not reach independently.
Related news
- Concentrix expands with Voiceworx.ai acquisition · 19 Feb 2025
- Thrive expands compliance reach with Abacode acquisition · 14 Jul 2025
- RKON expands cybersecurity reach with Bridge Security buy · 31 Oct 2024
Disclosure: Outsource Accelerator uses AI tools in the backend of its editorial workflow. Every article is reviewed and verified by a human editor before publication.
Stay ahead of the outsourcing industry. Join thousands of business leaders who rely on Outsource Accelerator for the news, trends, and expert insights that matter. Subscribe to our free newsletter and never miss an update.
