IT Governance & Risk Analyst II

WesBanco, Inc.; Ross Township (Allegheny County); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking an IT Governance, Risk, and Compliance professional to strengthen the bank's technology risk posture. This role focuses on aligning activities with regulatory expectations and industry frameworks such as NIST CSF 2.0, FFIEC IT Handbook, CIS Controls, and CRI profiles.

You will support policy management, risk assessments, TPRM, audits, and KRIs while collaborating across IT and business teams to ensure sound risk management and governance practices.

Qualifications

• Bachelor's degree as required or equivalent experience.
• Minimum of 2 years of relevant experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC.
• Supports IT risk assessment program and IT risk register, including scoring and remediation workflows.
• Performs control self-assessments across IT domains such as IAM, change management, vulnerability management, and data protection.
• Supports Third-Party Risk Management, including vendor due diligence and monitoring.
• Assists regulatory examinations and audits, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities including AI inventory, risk tiering, and lifecycle controls.

Skills

GRC basics

Regulatory knowledge

Risk assessment

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Tools

ServiceNow GRC

Archer

NIST CSF 2.0

FFIEC IT Handbook

Job description

WesBanco, Inc. is seeking an IT Governance, Risk, and Compliance professional to strengthen the bank's technology risk posture. This role focuses on aligning activities with regulatory expectations and industry frameworks such as NIST CSF 2.0, FFIEC IT Handbook, CIS Controls, and CRI profiles.

You will support policy management, risk assessments, TPRM, audits, and KRIs while collaborating across IT and business teams to ensure sound risk management and governance practices.