IT Governance & Risk Analyst II

WesBanco, Inc.; Fairmont (WV); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. seeks an IT Risk and Compliance professional to support governance, risk, and compliance initiatives across the enterprise. The role focuses on aligning technology risk posture with regulatory expectations, industry frameworks, and internal risk appetite.

Responsibilities include maintaining policy hierarchies, conducting IT risk assessments, and supporting regulatory examinations. The ideal candidate has 2+ years in IT risk, a related degree, and relevant certifications.

Qualifications

• 2+ years of relevant IT risk/compliance experience.
• Bachelor's degree in Information Systems, Computer Science, Business, or related field, or equivalent education/experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.
• Proficient in Microsoft Office; able to communicate complex information clearly.

Responsibilities

• Maintains technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports IT risk assessment program and IT risk register including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (identity/access, change, vulnerability, data protection).
• Supports Third-Party Risk Management, vendor due diligence, and monitoring.
• Assists with regulatory examinations and audits and tracks findings to closure.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities including AI inventory, risk tiering, and lifecycle controls.

Job description

WesBanco, Inc. seeks an IT Risk and Compliance professional to support governance, risk, and compliance initiatives across the enterprise. The role focuses on aligning technology risk posture with regulatory expectations, industry frameworks, and internal risk appetite.

Responsibilities include maintaining policy hierarchies, conducting IT risk assessments, and supporting regulatory examinations. The ideal candidate has 2+ years in IT risk, a related degree, and relevant certifications.