Security Risk Analyst

CCC Intelligent Solutions Inc.; Chicago (IL); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan

Performance Bonus

Comprehensive health insurance

Adoption Assistance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan options

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. is seeking a Security Risk Analyst to identify, analyze, and manage security risks across the organization. You will support governance, regulatory requirements (HIPAA, PCI DSS, SOX, Privacy) and frameworks (ISO, NIST) to enable risk-based decisions and maintain governance documentation.

You will collaborate with security, audit, and risk leadership, perform continuous risk assessments, and contribute to budgeting and strategy while supporting business agility.

Qualifications

• Minimum of 4 years of Cyber Security experience in a professional setting.
• Experience responding to security-related audits or customer/auditor inquiries.
• Experience assessing risk within a formal risk management process.
• Understanding of ISO layers, TCP/IP, encryption, and risk rating methodologies.
• Familiarity with PCI, SOX, HIPAA, GDPR, and GLBA.
• Knowledge of ISO and NIST security frameworks.
• Excellent written and verbal communication skills.

Responsibilities

• Conduct enterprise-wide risk assessments with compliance and security teams.
• Manage risk lifecycle within the GRC platform.
• Support audit and compliance initiatives; respond to inquiries.
• Identify risks related to privacy, security, business continuity, and regulatory compliance.
• Develop and document security improvements balancing risk and innovation.
• Participate in third-party vendor risk assessments.
• Define metrics to evaluate security program effectiveness.
• Maintain governance documents like policies and standards.
• Collaborate with leadership to plan and budget risk programs.
• Respond to ad-hoc security inquiries.
• Design new security processes and document them.
• Drive continuous service improvements to processes.

Skills

Cyber security

Risk management

Audit support

Communications skills

Education

Bachelor's in Computer Science / MIS

Tools

GRC platform

PCI/Compliance tools

Job description

Salary range is: $70,138.85 - $100,000.00 This position is bonus and/or commission eligible.

CCC Intelligent Solutions Inc. (CCC) is a leading cloud platform for the multi-trillion-dollar insurance economy, creating intelligent experiences for insurers, repairers, automakers, part suppliers, and more. At CCC, we’re making life just work by empowering more than 35,000 businesses with industry-leading technology to get drivers back on the road and to health quickly and seamlessly. We’re pushing boundaries with innovative AI solutions that simplify and enhance the claims and repair journey. Through purposeful innovation and the strength of its connections, CCC technologies empower the people and industry relied upon to keep lives moving forward when it matters most. Learn more about CCC at www.cccis.com.

The Role

The Security Risk Analyst plays a critical role within the security team, responsible for identifying, analyzing, and managing security risks across the organization. This role requires a strong understanding of security governance processes and the technical knowledge necessary to assess vulnerabilities and quantify associated risks. The analyst will support business decision-making by delivering quantitative risk assessments and documenting risk acceptance/rejection and mitigation strategies. This position contributes to the overall security strategy by enabling informed, risk-based decisions that align with governance frameworks while supporting business agility. Additionally, the analyst will assist in maintaining and updating governance documentation, leveraging knowledge of regulatory requirements (e.g., HIPAA, PCI DSS, SOX, Privacy) and security frameworks (e.g., ISO, NIST) to ensure policies and standards remain current and effective.

Key Responsibilities

• Conduct enterprise-wide, continuous risk assessments in collaboration with compliance and security teams.
• Manage the risk lifecycle, including identification, validation, documentation, and tracking within the GRC platform.
• Support internal/external audit, compliance initiatives, and queries from customers by providing timely and accurate responses to inquiries.
• Identify and assess risks related to privacy, security, business continuity, and regulatory compliance.
• Recommend and document security improvements that balance risk mitigation with operational efficiency and innovation.
• Participate in third-party vendor risk assessments to ensure appropriate safeguards are in place.
• Analyze risk findings and report on program gaps and areas for improvement.
• Define and track qualitative and quantitative metrics to evaluate the effectiveness of the security program.
• Maintain and update the library of governance documents, including policies, standards, and guidelines.
• Collaborate with security, audit, and risk leadership to conduct ongoing program assessments and support strategic planning and budgeting.
• Respond to ad-hoc security-related inquiries from employees across the organization.
• Design new security related process and document them in a process/procedure document.
• Make Continuous Service Improvements (CSI) to streamline all process on regular basis.

Requirements

• Minimum of 4 years of Cyber Security experience BS in Computer Science, MIS, Cybersecurity is required.
• MUST have experience responding to security related audits or queries from customers/auditors.
• MUST have experience assessing and processing risk in a formal risk management process.
• Good basic understanding of IT technology overall like ISO 7 layers, TCPIP, encryption, risk rating methodology and security concepts.
• Familiarity with regulatory requirements such as PCI, SOX, HIPAA, GDPR, and GLBA.
• Working knowledge of security frameworks including ISO and NIST.
• Excellent written and verbal communication skills, with the ability to convey complex security concepts to non-technical audiences.
• Solid understanding of incident response, system configuration, vulnerability management, and security hardening practices.
• Ability to perform critical thinking and operate by themselves without constant detailed instructions.

Certifications Preferred

• Any security related certification is a major plus. (CISSP, CISA and other)
• Certification to ITIL or ITSM related courses.

Interview Policy & Privacy Notice

A video interview is required for this position. Video interviews are transcribed. Transcriptions are retained and may be reviewed by CCC and our recruiters. Candidates are not permitted to use generative AI or automated assistance during the interviews unless explicitly allowed by the interview team for a specific exercise. Our Job Applicant Privacy Notice is available HERE.

About CCC's Commitment to Employees

CCC Intelligent Solutions understands that our employees play an integral role in our vision to shape a world where life just works. Our team is defined by our values of Integrity, Customer-Focus, Innovation, Inclusion & Diversity, Tenacity, and Connection. Through diverse perspectives, purposeful innovation, and the strength of connections, our technologies empower the people and industry relied upon to keep lives moving forward when it matters most. At CCC, together everyone can thrive as we innovate and collaborate, creating employee experiences that just work. We are committed to providing opportunities for our people to make real-life impacts, advance in their careers, and contribute to CCC’s success.

CCC offers competitive compensation and benefits to support you and your families, including:

• 401K Match
• Paid time off
• Annual Incentive Plan
• Performance Bonus
• Comprehensive health insurance
• Adoption Assistance
• Tuition Reimbursement
• Wellness Programs
• Stock Purchase Plan options
• Employee Resource Groups

For more information about our benefits, please check out our careers site.

Here, you belong. You are seen, valued, and respected. We celebrate you for who you are and all you bring. Every voice is heard and is important to our success. You can hear what employees have to say about our culture here