GRC Analyst

Nelly Solutions

. Run the operational engine of Nelly's GRC .

Posted 9/23/2026full-timeBerlin • GermanyJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing third-party risk, business continuity management, and compliance operations, with a strong focus on audit readiness and evidence preparation. Proficient in coordinating vendor assessments and maintaining comprehensive risk registers in a fast-paced environment.

Highest-signal resume keywords

Third-Party Risk ManagementBusiness Continuity ManagementCompliance OperationsISO 27001 CertificationVendor Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT AuditProcess AuditControl TestingEvidence CollectionRisk Register MaintenanceBusiness Impact AnalysisAudit Evidence PreparationPolicy Review ManagementAttention to DetailWorkpaper Discipline

Soft Skills

Organizational SkillsCommunication SkillsCollaboration Skills

Tools & Technologies

Compliance PlatformAudit Management Software

Certifications & Qualifications

ISO 27001SOC 2C5 Certification

Industry Keywords

GRC OperationsFintechBig4 ExperienceVendor ManagementAudit Firm Experience

About the role

Key responsibilities & impact

Run the operational engine of Nelly's GRC
Own end-to-end cycles of third-party risk, business continuity, control-testing and audit evidence
Operate the compliance platform, monitor failing controls, chase remediation owners and maintain audit-ready evidence
Run the third-party lifecycle, including onboarding assessments, periodic reviews, evidence collection and supplier/outsourcing register upkeep
Coordinate the business continuity management cycle, collect BIA inputs, organize tests/exercises and maintain plans
Maintain registers and trackers, including risk register support and findings logs
Support external audits by preparing evidence packs and managing request lists
Administer the policy review cycle, including controlled documents, review dates and approvals
Participate in online and on-site interviews with Talent Acquisition, the hiring manager and team members

Requirements

What you’ll need

2–4 years in IT/process audit, BCM or GRC operations
Big4/audit firm experience, or in-house experience through a first ISO 27001/SOC 2/C5 certification
Knowledge of what evidence an auditor accepts
Workpaper discipline and strong attention to detail
Experience running or supporting vendor assessments
Scale-up or fintech environment strongly preferred over big-bank silo experience

Benefits

Comp & perks

Deutschlandticket (public transport pass covering all of Germany) or Swapfiets membership
Urban Sports Club membership
Flexible working hours
Hybrid setup
Up to 4 weeks of workation
Dog-friendly office
Snacks and a fridge full of cold drinks
Team environment with growth investment, trust and ownership