About CCC
CCC is the technology platform for the underwritten assets economy. CCC technology, insights, and support connect industries - insurers, automotive manufacturers, collision repairers, parts suppliers, lenders, fleet operators and more - to advance decision-making, productivity, and customer experiences for thousands of clients worldwide. Clients leverage CCC's network management, data management, AI, operational workflows and customer experience solutions to efficiently scale, interact, transact and achieve their unique business objectives. CCC was ranked a best mid-sized company to work for by Forbes (2019). BuiltIn Chicago, Austin and LA named CCC a top place to work in 2020. Diverse perspectives and experiences are core to CCC's success and award-winning culture of more than 2,000 employees worldwide. We hold inclusion as a core value and are committed to celebrating and cultivating the diversity of our team. With a 40+ year track record of innovation, CCC's tenacious spirit and growth mindset turn next generation technology into real world solutions and empower team members to expand their knowledge and potential. Headquartered in Chicago, CCC has 11 locations worldwide. CCC's principal PE investors are Advent International, Technology Crossover Ventures, and Oak Hill Capital Find out more about CCC by visiting cccis.com.
Job Description Summary
The Information Security Data Analyst reports to the Risk & Compliance Manager and is responsible for the administration of CCC's Data Protection program. This critical position will work closely with several stakeholders across the organization and is primarily charged with protecting data and minimizing the risks associated its use throughout the enterprise.The Data Analyst is further responsible for ensuring data and privacy-related frameworks and controls are understood and integrated into the larger Data Protection program.
Job Duties

• Develop & Maintain data inventory governance
• Work with both Product Development and Product Management teams to develop data inventories that meet CCC regulatory and customer requirements
• A practical catalog reflecting data types, locations, uses, customers, etc.
• Complete, interactive inventory comprising all PII data elements suitable for responding to Data Subject Access Requests (DSARs), managing retention and lifecycle requirements, and tracking specific ownership by customer and within CCC
• Provide both macro- and product-specific reporting to all stakeholders regarding data held, processed, and transferred by each CCC market, product, customer, etc.
• Execute and help maintain the Data Utilization program to facilitate proper, safe use of data held by CCC toward advancing the organization's business interests
• Execute, maintain, and improve the CCC Data Classification program and associated controls

• Establish, together with other groups within CCC, a Data Loss Prevention (DLP) program
• Coordinate with Compliance and Risk analysts to form a '360-degree view' of information security and privacy risk at CCC and help leverage each other's strengths toward developing and executing a holistic approach to security and risk.
• Other duties as assigned

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related discipline
• Excellent verbal and written communication skills
• Ability to self-initiate and work autonomously
• Ability to thrive in a complex environment with often ambiguous and ill-defined requirements
• At least 3 years of experience comprising some or all of the following disciplines in large, complex IT environments:
  • Data Analysis
  • Risk management, including vendor risk management
  • Information security governance
  • Cybersecurity