SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Nelly is building an AI-driven financial operating system for European healthcare, transforming administrative processes into intelligent, automated workflows. The company has raised over €50 million in Series B funding and operates from Berlin.
As a GRC Analyst, you will own the operational engine of Nelly's Governance, Risk, and Compliance function. Your responsibilities include:
- Operating the compliance platform day-to-day: monitoring failing controls, chasing remediation owners, and maintaining evidence in audit-ready status
- Running the third-party risk lifecycle: conducting onboarding assessments, performing periodic reviews, collecting evidence (SOC 2, ISO, C5 reports, DPAs), and maintaining the Supplier Directory and outsourcing register
- Coordinating the Business Continuity Management (BCM) cycle: collecting Business Impact Analysis inputs from process owners, organizing tests and exercises, and maintaining plans
- Maintaining risk registers, trackers, and findings logs
- Supporting external audits (C5, ISO, bank partners): preparing evidence packs and managing request lists
- Administering the policy review cycle, including controlled documents, review dates, and approvals
The role is hybrid based in Berlin with flexible working hours, up to 4 weeks of workation, and a dog-friendly office environment. Benefits include Deutschlandticket (German public transport pass) or Swapfiets bike membership, Urban Sports Club membership, and snacks/beverages.
REQUIREMENTS:
- 2–4 years of experience in IT/process audit, Business Continuity Management, or GRC operations (Big 4/audit firm background or in-house experience through first ISO 27001/SOC 2/C5 certification)
- Understanding of what evidence auditors accept
- Strong workpaper discipline and meticulous attention to detail
- Experience running or supporting vendor assessments
- Scale-up or fintech environment experience strongly preferred over large-bank experience
