Security Risk & Compliance Analyst

CCC Intelligent Solutions Inc.; Chicago (IL); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

401K Match

Paid time off

Annual Incentive Plan

Performance Bonus

Comprehensive health insurance

Adoption Assistance

Tuition Reimbursement

Wellness Programs

Stock Purchase Plan options

Employee Resource Groups

Job summary

CCC Intelligent Solutions Inc. is seeking a Security Risk Analyst to identify, analyze, and manage security risks across the organization. You will support governance, regulatory requirements (HIPAA, PCI DSS, SOX, Privacy) and frameworks (ISO, NIST) to enable risk-based decisions and maintain governance documentation.

You will collaborate with security, audit, and risk leadership, perform continuous risk assessments, and contribute to budgeting and strategy while supporting business agility.

Qualifications

• Minimum of 4 years of Cyber Security experience in a professional setting.
• Experience responding to security-related audits or customer/auditor inquiries.
• Experience assessing risk within a formal risk management process.
• Understanding of ISO layers, TCP/IP, encryption, and risk rating methodologies.
• Familiarity with PCI, SOX, HIPAA, GDPR, and GLBA.
• Knowledge of ISO and NIST security frameworks.
• Excellent written and verbal communication skills.

Responsibilities

• Conduct enterprise-wide risk assessments with compliance and security teams.
• Manage risk lifecycle within the GRC platform.
• Support audit and compliance initiatives; respond to inquiries.
• Identify risks related to privacy, security, business continuity, and regulatory compliance.
• Develop and document security improvements balancing risk and innovation.
• Participate in third-party vendor risk assessments.
• Define metrics to evaluate security program effectiveness.
• Maintain governance documents like policies and standards.
• Collaborate with leadership to plan and budget risk programs.
• Respond to ad-hoc security inquiries.
• Design new security processes and document them.
• Drive continuous service improvements to processes.

Skills

Cyber security

Risk management

Audit support

Communications skills

Education

Bachelor's in Computer Science / MIS

Tools

GRC platform

PCI/Compliance tools

Job description

CCC Intelligent Solutions Inc. is seeking a Security Risk Analyst to identify, analyze, and manage security risks across the organization. You will support governance, regulatory requirements (HIPAA, PCI DSS, SOX, Privacy) and frameworks (ISO, NIST) to enable risk-based decisions and maintain governance documentation.

You will collaborate with security, audit, and risk leadership, perform continuous risk assessments, and contribute to budgeting and strategy while supporting business agility.