IT Governance & Risk Analyst III - Policy, Compliance & AI

WesBanco, Inc.; Indianapolis (IN); On-site; USD 100,000 - 140,000; Full time

Job summary

WesBanco, Inc. is seeking an experienced IT Governance, Risk and Compliance professional to support enterprise GRC programs and align technology risk posture with regulatory expectations, NIST CSF 2.0, FFIEC, and CIS Controls.

The role drives risk assessments, policy hierarchy, and KRIs across IT domains, including AI governance lifecycle controls, vendor due diligence, and regulatory examination support. The ideal candidate will possess a bachelor’s degree in a related field, 4+ years of

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent education/experience.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.
• Familiarity with SOC 2 review processes, ITGC/SOX concepts, and cloud risk considerations (AWS, Azure).

Responsibilities

• Maintains the technology policy hierarchy aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports IT risk assessment program and IT risk register with scoring, treatment plans, and exception workflows.
• Performs control self-assessments across IAM, change management, vulnerability management, and data protection.
• Supports Third-Party Risk Management including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and audits, tracking findings and remediation.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory and lifecycle controls.

Skills

GRC governance

IT risk management

Regulatory compliance

Vendor due diligence

Third-Party Risk Management

Risk metrics

AI governance

Education

Bachelor's degree in Information Systems

Equivalent education/experience

Tools

ServiceNow GRC

Archer

Microsoft Office

Job description

WesBanco, Inc. is seeking an experienced IT Governance, Risk and Compliance professional to support enterprise GRC programs and align technology risk posture with regulatory expectations, NIST CSF 2.0, FFIEC, and CIS Controls.

The role drives risk assessments, policy hierarchy, and KRIs across IT domains, including AI governance lifecycle controls, vendor due diligence, and regulatory examination support. The ideal candidate will possess a bachelor’s degree in a related field, 4+ years of