Outsourcing Business Owner (f/m/d)

Outsourcing Business Owner (f/m/d) At Upvest, we are on a mission to make investing as easy as spending money. Upvest empowers businesses to offer a wide range of investment products and the best experience in the field of capital market investment and retirement planning. Upvest’s Investment API is easy to integrate so that fintechs and financial institutions can save resources and fully focus on their core business. We are proud to partner with Europe’s leading Fintechs and financial institutions such as DKB, Revolut, N26 and Raisin. Founded in 2017 by Martin Kassing, Upvest now brings together over 270 talented professionals from more than 70 nationalities. Upvest is backed by €280M in total funding from world-class investors, including BlackRock, Tencent, Sapphire Ventures, and Bessemer Venture Partners, Earlybird, Notion Capital, and Motive. Our latest €105M funding round in March 2026 - led by Sapphire and Tencent - serves as a massive catalyst for our growth, allowing us to offer premier investment experience. Our Client Impact team sits at the heart of that mission. We own the full journey from contract signature to a live, healthy investment product for every client — and we keep it running. As Outsourcing Business Owner, you are the first line of defense for all outsourcing and critical ICT relationships within Client Impact. You own and manage the full lifecycle of outsourced services — from pre-contractual due diligence through active governance to annual compliance reviews — in accordance with EBA/GL/2019/02 guidelines, MaRisk (AT 9), and DORA. Today, the Client Impact portfolio spans outsourcing relationships with TOL (Take our Licence) clients, covering e.g. Customer Support, Document Management, Complaint Management, and AML services. You will also be the person who sets up, monitors, and owns every outsourcing relationship with our new clients. This is a high-ownership role that sits at the intersection of regulatory compliance, operational excellence, and client relationship management. You will work closely with the 2nd line (Outsourcing/GRC/Compliance) and 3rd line (Internal Audit) functions, while being fully accountable for the performance and resilience of outsourced services end-to-end. WHAT YOU’LL DO: PRE-CONTRACTUAL PHASE - Lead contract review and negotiation to ensure alignment with regulatory requirements and operational needs before signature. - Conduct structured due diligence: gather all required documentation on providers’ financial health, security posture, and compliance certifications. - Perform risk assessments identifying operational, legal, and security threats associated with each outsourcing partner. - Define and set up mandatory KPIs, thresholds, and monitoring mechanisms as a condition of onboarding. - Develop clear, actionable Exit Strategies for each provider, ensuring business continuity and data portability in case of contract termination or provider failure. ONGOING GOVERNANCE - Monitor KPIs and SLAs on a regular basis to ensure outsourced services meet performance standards. - Maintain regular communication with providers to address operational issues early and proactively. - Report on outsourcing performance to Central Outsourcing Management on a quarterly and annual basis. - Ensure continued documentation of meetings and monitoring activities to maintain a complete audit trail. EVENT-DRIVEN OBLIGATIONS - Incident reporting: formally report incidents, track action plans to closure, and ensure root cause analysis is performed and remediated. - Subcontractor management: immediately assess and report new subcontractors or significant supply chain changes, evaluating the impact on risk and compliance. - Change management: evaluate the impact of any provider-initiated changes to systems or service scopes. - Action tracking: continuously monitor all open issues and action items derived from incidents until full closure. ANNUAL REVIEWS - Annually validate and ... (truncated, view full listing at source)