Security Risk Analyst — Governance & Risk Insight Lead

CCC Information Services; Chicago (IL); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan

Performance Bonus

Comprehensive health insurance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan options

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. is seeking a Security Risk Analyst in Chicago, IL to identify and manage security risks across the organization. You will deliver quantitative risk assessments and document risk acceptance, mitigation strategies, and governance updates.

The role requires 4+ years in cybersecurity, experience with audits, and familiarity with PCI, HIPAA, SOX, GDPR, and regulatory frameworks. It supports governance processes while enabling business agility and innovation.

Qualifications

• Minimum of 4 years of Cyber Security experience.
• Experience responding to security audits or customer/auditor inquiries is required.
• Familiarity with regulatory requirements (PCI, SOX, HIPAA, GDPR, GLBA).
• Working knowledge of security frameworks ISO and NIST.

Responsibilities

• Conduct enterprise-wide, continuous risk assessments with compliance and security teams.
• Manage the risk lifecycle in the GRC platform.
• Support audit, compliance initiatives, and customer inquiries with timely responses.
• Identify and assess risks related to privacy, security, and regulatory compliance.
• Recommend security improvements balancing risk and operations.

Skills

Cyber Security

Risk assessment

Regulatory compliance

Audit support

Education

BS in Computer Science / MIS / Cybersecurity

Tools

GRC platform

Job description

CCC Intelligent Solutions Inc. is seeking a Security Risk Analyst in Chicago, IL to identify and manage security risks across the organization. You will deliver quantitative risk assessments and document risk acceptance, mitigation strategies, and governance updates.

The role requires 4+ years in cybersecurity, experience with audits, and familiarity with PCI, HIPAA, SOX, GDPR, and regulatory frameworks. It supports governance processes while enabling business agility and innovation.