IT Governance & Risk Analyst II

WesBanco, Inc.; Williamstown (OH); On-site; USD 80,000 - 110,000; Full time

Job summary

WesBanco, Inc. is seeking an IT risk and governance professional to support the enterprise GRC program, ensuring technology risk posture aligns with regulatory expectations and industry frameworks.

You will help manage risk assessments, control self-assessments, vendor risk, and regulatory examinations. The role requires 2+ years of relevant experience, a bachelor’s degree inIS/CS/business, and familiarity with GRC tools (ServiceNow GRC, Archer).

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent education and/or experience.
• Minimum of 2 years of relevant experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.
• Familiarity with SOC 2 review processes, ITGC/SOX concepts, and cloud risk considerations (AWS, Azure).

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

IT risk management

Regulatory compliance

Analytical thinking

Multitasking

Education

Bachelor's degree in Information Systems, Business, CS

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an IT risk and governance professional to support the enterprise GRC program, ensuring technology risk posture aligns with regulatory expectations and industry frameworks.

You will help manage risk assessments, control self-assessments, vendor risk, and regulatory examinations. The role requires 2+ years of relevant experience, a bachelor’s degree inIS/CS/business, and familiarity with GRC tools (ServiceNow GRC, Archer).