GRC Analyst (f,x,m)

We're on the lookout for an ambitious Government, Risk and Compliance Analyst to join our Risk Team at our office in Berlin. Join us in building the largest AI enabled fintech for healthcare!

What to expect in the role as GRC Analyst

You will run the operational engine of Nelly's GRC: own the end-to-end cycles of third party risk, business continuity, control-testing and audit-evidence, so that our registers and evidence are audit-ready every day of the year.

About Nelly

We are building the AI-Driven Financial Operating System for European healthcare, solving the biggest challenges for patients and practices. Our all-in-one platform transforms chaotic administrative processes into intelligent, automated workflows, from patient care to billing to next-generation payments. With our Series B funding of over €50 million from world-class investors, we are turning our vision into reality.

Joining us, you will

• Operate the compliance platform day-to-day: monitor failing controls, chase remediation owners, keep evidence green.
• Run the third-party lifecycle: onboarding assessments, periodic reviews, evidence collection (SOC 2/ISO/C5 reports, DPAs), Supplier Directory and outsourcing register upkeep.
• Coordinate the BCM cycle: collect BIA inputs from process owners, organize tests/exercises, maintain plans.
• Maintain registers and trackers (risk register support, findings log).
• Support external audits (C5, ISO, bank partners): prepare evidence packs, manage request lists.
• Administer the policy review cycle (controlled documents, review dates, approvals).

What you'll bring

• 2–4 years in IT/process audit, BCM or GRC operations (Big4/audit firm, or in-house through a first ISO 27001/SOC 2/C5 certification).
• You know what evidence an auditor accepts.
• Workpaper discipline with a big attention to detail.
• You have run or supported vendor assessments.
• Scale-up or fintech environment strongly preferred over big-bank silo experience.

Our Interview Process

First call with your TA Partner (30', online), second call with your Hiring Manager (60', online), then a technical interview on-site with your future manager and a team member.

What we offer

• Deutschlandticket (public transport pass covering all of Germany) or Swapfiets membership, so you get around the city fast.
• Urban Sports Club membership, for sport and balance.
• Flexible working hours and a hybrid setup.
• Up to 4 weeks of workation.
• A dog-friendly office with great vibes and a team that's fun to work with.
• Snacks and a fridge full of cold drinks.

Nelly welcomes applications from people of all genders and backgrounds, regardless of origin or age.