IT Governance Analyst III - Service Strategy - Wheeling, WV

WesBanco Bank Inc.; Toledo (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

WesBanco, Inc. in Toledo, OH is seeking an experienced IT GRC professional to support enterprise governance, risk and compliance programs.

The role applies advanced knowledge with minimal supervision to align technology risk with regulatory expectations and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, CIS Controls v8, and CRI Profile. The ideal candidate will possess strong analytical, communication and presentation skills, a four-year degree in a related field, and at least

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self‑assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third‑Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

Analytical thinking

Problem solving

Communication skills

Cross-functional collaboration

Time management

Presentation skills

Independent worker

Team player

Education

Bachelor's degree in Information Systems, Business, Computer Science

Tools

ServiceNow GRC

Archer

Microsoft Office

Excel

PowerPoint

Job description

SUMMARY:

Handles complex assignments independently and serves as an experienced individual contributor, applying advanced knowledge with minimal supervision. Responsible for supporting the enterprise IT governance, risk, and compliance (GRC) program, helping ensure the Bank's technology risk posture aligns to regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, the FFIEC IT Examination Handbook, CIS Controls v8, and the CRI Profile.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self‑assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third‑Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

OTHER REQUIREMENTS:

• Banking is a highly regulated industry and you will be expected to acquire and maintain a proficiency in the Bank's policies and procedures, and adhere to all laws, rules and regulations that are applicable to your conduct and the work you will be performing. You will also be expected to complete all assigned compliance training in a timely manner.
• Ability to learn new technologies and keep up with industry trends.
• Professional demeanor in appearance, interpersonal relations, work ethic and attitude.
• Ability to interact effectively across all levels of the organization.
• Demonstrated ability to manage multiple priorities and meet critical deadlines under difficult time restraints.
• Excellent verbal, written and presentation skills with the ability to define and solve problems.
• Team player with a positive outlook.
• Ability to work independently and meet communicated deadlines.
• Excellent analytical, problem‑solving and decision‑making skills.
• Working knowledge of GRC platforms (e.g., ServiceNow GRC, Archer) and control/evidence workflows.
• Deep working knowledge of the FFIEC IT Examination Handbook, NIST CSF 2.0, CIS Controls, and NIST SP 800‑53.
• Familiarity with SOC 2 review processes, ITGC/SOX concepts, and cloud risk considerations (AWS, Azure).
• Proficient in Microsoft Office products including Outlook, Word, PowerPoint and Excel.
• Bachelor's degree in Information Systems, Business, Computer Science, or a related field, or equivalent education and/or experience required.
• Minimum of 4 years of relevant experience required.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.