ZipRecruiter

Log In

1

Security Risk Analyst Jobs in Illinois (NOW HIRING)

ZS

Governance & Risk Analyst

Chicago, IL · On-site

$85K - $95K/yr

Governance & Risk Analyst in the Enterprise will... The GRC Analyst will support the organization ... Review vendor security questionnaires, supporting evidence, and contractual artifacts to assess ...

Booz Allen Hamilton, Inc.

IL · On-site

$99K - $225K/yr

Information Security Risk Specialist, Senior The Opportunity: Cyber threats are everywhere, and the ... Experience analyzing and managing software vulnerability reports * Experience with DoW RMF ...

Early Warning Services

Sr. Risk Analyst

Chicago, IL · Hybrid

$84K - $105K/yr

Overall Purpose The Sr. Risk Analyst will support the Senior Director of Enterprise Risk Management ... Support the production of all necessary reports to the ERM Committee, Risk & Security Committee ...

New

Booz Allen Hamilton, Inc.

IL · On-site

$99K - $225K/yr

Information Security Risk Specialist The Opportunity: Cyber threats are everywhere, and the ... Experience analyzing and managing software vulnerability reports * Experience with DoW RMF ...

Javen Technologies, Inc

Sr. Security Analyst

Chicago, IL · On-site

$99K - $129K/yr

Perform security risk assessments, quantify risk, facilitate risk decisions, and provide advisory services to business and technology stakeholders. * Support existing team of security analysts with ...

Electrosoft

Cyber Security Risk Analyst

Belleville, IL · On-site

Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott Air ... Conduct trend analysis to identify systemic security issues by analyzing vulnerability and ...

Invesco

Junior Risk Analyst

Downers Grove, IL · Hybrid

... and security contributions) and translate results into clear narratives for stakeholders Perform ... Prepare analysis and materials for portfolio reviews, risk forums, and governance routines ...

next page

Showing results 1-20

All JobsSecurity Risk Analyst JobsSecurity Risk Analyst Jobs in Illinois

Security Risk Analyst information

See Illinois salary details

$10

$48

$67

How much do security risk analyst jobs pay per hour?

As of Aug 6, 2026, the average hourly pay for security risk analyst in Illinois is $48.85, according to ZipRecruiter salary data. Most workers in this role earn between $39.62 and $58.22 per hour, depending on experience, location, and employer.

What does a security risk analyst do?

A Security Risk Analyst is responsible for identifying, assessing, and mitigating risks to an organization's information systems and data. They analyze security measures, conduct vulnerability assessments, and recommend strategies to protect against threats such as cyberattacks, data breaches, and unauthorized access. Their work helps ensure that a company's digital assets remain safe and compliant with industry regulations. Security Risk Analysts collaborate with IT teams and management to implement effective security policies and respond to incidents as needed.

What are the key skills and qualifications needed to thrive as a security risk analyst?

To thrive as a Security Risk Analyst, you need a strong background in risk assessment, information security principles, and analytical thinking, often supported by a degree in cybersecurity, IT, or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security assessment tools, and certifications like CISSP or CISM is highly valuable. Excellent communication, attention to detail, and problem-solving abilities help you translate complex risks for varied stakeholders and drive mitigation strategies. These skills and qualities are crucial for identifying vulnerabilities, minimizing threats, and maintaining organizational security and compliance.

What are some common challenges security risk analysts face when collaborating with other departments?

Security Risk Analysts often work closely with IT, compliance, and business units to assess and mitigate risks. A common challenge is bridging the gap between technical security requirements and business objectives, as not all stakeholders may have a cybersecurity background. Effective communication and education are key to ensuring that risk recommendations are understood and adopted. Additionally, prioritizing risks with limited resources and balancing security with operational needs can be complex, requiring strong collaboration and negotiation skills.

What is the difference between Security Risk Analyst vs Security Analyst?

AspectSecurity Risk AnalystSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, vulnerability analysis, policy developmentMonitoring security systems, incident response, security audits
Employer & Industry UsageFinancial, healthcare, government sectors focusing on risk mitigationIT departments across various industries focusing on security operations

While both roles focus on cybersecurity, Security Risk Analysts primarily assess and manage potential security threats and vulnerabilities, emphasizing risk mitigation strategies. Security Analysts tend to monitor security systems, respond to incidents, and ensure ongoing security measures. Both roles often require similar certifications and work environments but differ in their core responsibilities within cybersecurity teams.

What is a security risk analyst?

A security risk analyst is a professional who identifies, assesses, and mitigates security threats to an organization’s information systems. They analyze vulnerabilities, develop security strategies, and often use tools like risk assessment frameworks and security software to protect data and infrastructure.
What are popular job titles related to Security Risk Analyst jobs in Illinois? For Security Risk Analyst jobs in Illinois, the most frequently searched job titles are:
What job categories do people searching Security Risk Analyst jobs in Illinois look for? The top searched job categories for Security Risk Analyst jobs in Illinois are:
What cities in Illinois are hiring for Security Risk Analyst jobs? Cities in Illinois with the most Security Risk Analyst job openings:
What are popular job titles related to Security Risk Analyst jobs in IL? For Security Risk Analyst jobs in IL, the most frequently searched job titles are:
Security Risk Analyst jobs near you
Infographic showing various Security Risk Analyst job openings in Illinois as of July 2026, with employment types broken down into 75% Full Time, 12% Temporary, and 13% Contract. Highlights an 85% In-person, and 15% Remote job distribution, with an average salary of $101,600 per year, or $48.8 per hour.

Information Security Risk Analyst - Intermediate

The University of Chicago Medicine

Darien, IL • On-site

Full-time

Posted 14 days ago

University Of Chicago Medicine rating

7.4

Company rating: 7.4 out of 10

Based on 61 frontline employees who took The Breakroom Quiz

267th of 887 rated healthcare providers

Job description


Join a world-class academic healthcare system, UChicago Medicine, as an Information Security Risk Analyst - Intermediate in our Information Security and Privacy GRC department. This position will be primarily a work-from-home opportunity with the requirement to come onsite as needed. You will need to be based in the greater Chicagoland area.
The Information Security Risk Analyst - Intermediate plays a critical role within the Governance, Risk and Compliance (GRC) team in executing and enhancing the organization's information security risk management program. The analyst will independently conduct risk analysis on information systems, platforms, and processes in accordance with established regulatory requirements, organizational policies, and industry standards. The analyst will lead and contribute to the identification, assessment, documentation, mitigation, and communication of information security risks across the organization.
This position supports risk-driven decision-making by collaborating with stakeholders, managing risk treatment plans, and ensuring compliance with HIPAA, NIST, and other applicable healthcare cybersecurity regulations and frameworks. The analyst is expected to operate with moderate independence, assist in maturing risk workflows, and contribute to strategic improvements in governance, risk, and compliance activities.
The ideal candidate will have a strong understanding of security frameworks, risk assessment methodologies, risk assessments, risk registers, and the management of audit and penetration testing findings. The ideal candidate should be adept at monitoring regulatory developments while promoting a culture of risk awareness across the organization.
Essential Job Functions
  • Lead and conduct comprehensive information security risk analysis for IT assets, applications, processes, medical devices and third-party vendors.
  • Evaluate threats and vulnerabilities affecting the confidentiality, integrity, and availability of electronic protected health information (ePHI) and any other confidential or sensitive information, ensuring alignment with HIPAA Security Rule requirements and other applicable regulatory frameworks (e.g., NIST,).
  • Lead and manage risk management initiatives based on analysis of outcomes, including maintaining the organization's risk register and scoring methodology.
  • Oversee corrective action plans (CAPs), penetration testing results, audit findings, and risk treatment outcomes.
  • Collaborate with IT partners and key stakeholders to prioritize, implement, and track remediation efforts.
  • Monitor regulatory changes and industry threats to proactively identify emerging risks, recommend mitigation strategies, and document findings.
  • Contribute to risk reporting, including executive dashboards, and participate in risk acceptance processes and governance reviews.
  • Contribute to the development, review, and improvement of cybersecurity policies, standards, and procedures.
  • Evaluate policy exceptions and assist in documenting decisions for governance committees.
  • Enhance the organization's cybersecurity awareness and training efforts by communicating risk insights to technical and non-technical audiences.
  • Other duties as assigned

Required Qualifications
  • Bachelor's degree required in Information Security, Computer Science, Engineering, Information Technology, or a related field; master's degree preferred
  • 3+ years of experience in cybersecurity, information security risk management, audit; healthcare industry experience strongly preferred
  • Demonstrated experience with risk assessment methodologies, auditing, information security practices, and familiarity with risk management platforms and risk registers
  • Strong understanding of regulatory compliance and industry best practices towards maintaining compliance with HIPAA, NIST and other relevant healthcare regulations and standards
  • One or more of the following certifications are required or must be obtained within 12 months of hire: CRISC, CISM, CISA or any other applicable certification
  • Ability to lead and structure risk assessments with limited supervision
  • Ability to manage multiple concurrent assessments and projects in a fast-paced healthcare setting
  • Experience preparing both detailed technical risk reports and executive-level summaries, tailored to varied audiences to support informed decision-making and governance oversight
  • Ability to build strong cross-functional relationships and collaboration across departments, including IT, Legal, Compliance, Clinical Operations, and Privacy, to support a collaborative approach to risk management and governance
  • Strong written and verbal communication and interpersonal skills, including ability to translate technical findings into business-relevant language for leadership audiences
  • Experience tracking audit findings, third party vendor risks, and remediation efforts
  • Familiarity with security platforms and tools
  • Ability to analyze contractual security language to identify risk exposure and recommend controls
  • Ability to learn quickly and work effectively in a team environment
  • Ability to understand and work with healthcare professionals, educators, and researchers
  • Ability to integrate cybersecurity risk management with business operations, healthcare delivery, and IT services

Position Details
  • Job Type/FTE: Full Time
  • Shift: Days
  • Location: Flexible (Hyde Park; Darien)
  • Unit/Department: Information Security Office
  • CBA Code: Non-Union

About Us
We've been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment... with patients and with each other. We're in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you'd like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we're doing work that really matters. Join us. Bring your passion.
UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities
UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.
As a condition of employment, all employees are required to complete a pre-employment physical, background check, drug screening, and comply with the flu vaccination requirements prior to hire. Medical and religious exemptions will be considered for flu vaccination consistent with applicable law.
Compensation & Benefits Overview
UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.
The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.
Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine.

What University Of Chicago Medicine employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply