Concentrix Corp. has acquired CastleHill Managed Risk Solutions, the company announced on Sept. 8, 2026, adding governance, risk and compliance (GRC) capabilities to its existing portfolio of financial crime, cybersecurity and regulatory compliance services.
Financial terms of the transaction were not disclosed.
CastleHill, which operates a GRC-as-a-Service model, provides third-party risk management (TPRM) and AI governance solutions to clients across banking, financial services, manufacturing and other regulated industries. The acquisition expands Concentrix's footprint in the banking and financial services sector.
CastleHill maintains partnerships with technology providers Archer, ProcessUnity and OneTrust.
Chris Caldwell, president and CEO of Concentrix, said clients are recognizing that AI-related risk across their enterprises is accelerating and require a partner with deep domain expertise to design, implement and operate these programs at scale.
Tim Carbery and Michael Duggan, co-founders of CastleHill, said they have spent years helping clients navigate regulatory complexity, build and operationalize sustainable risk and compliance programs, and maximize the value of their GRC investments.
