IT Governance & Risk Analyst II

WesBanco, Inc.; Knoxville (TN); On-site; USD 80,000 - 110,000; Full time

Job summary

WesBanco, Inc. is seeking an IT risk and compliance professional to support the governance, risk, and compliance program. The role focuses on aligning technology risk posture with regulatory expectations and industry frameworks, including NIST CSF 2.0 and FFIEC guidance.

Responsibilities include risk assessments, CSA activities, and third-party risk management, with exposure to OCC, FDIC, and Federal Reserve examinations. A minimum of two years of relevant experience is required.

Qualifications

• Moderate complexity tasks under limited supervision.
• Developing expertise in GRC programs and regulatory frameworks.
• Minimum of 2 years of relevant experience required.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintains the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an IT risk and compliance professional to support the governance, risk, and compliance program. The role focuses on aligning technology risk posture with regulatory expectations and industry frameworks, including NIST CSF 2.0 and FFIEC guidance.

Responsibilities include risk assessments, CSA activities, and third-party risk management, with exposure to OCC, FDIC, and Federal Reserve examinations. A minimum of two years of relevant experience is required.