IT Governance & Risk Analyst — Policy to Compliance Lead

WesBanco, Inc.; Ross Township (Allegheny County); Presencial; USD 115 000 - 155 000; Tempo integral

Resumo da oferta

WesBanco, Inc. in the United States seeks an experienced IT risk and governance professional to manage and enhance the enterprise GRC program. You will align technology controls with regulatory expectations and monitor risk posture across IT domains, third-party risk, and AI governance.

The role requires independence, strong communication, and multi-priority handling in a regulated financial institution. The ideal candidate has 4+ years of relevant experience, familiarity with GRC platforms

Qualificações

• Bachelor's degree in IS, business, CS, or related field or equivalent experience.
• Minimum of 4 years of relevant experience in financial IT risk or governance.
• Experience in regulated financial institutions preferred.
• Professional certifications (CRISC, CISA, CISM, CGEIT, CISSP) preferred.
• Strong knowledge of FFIEC IT Handbook, NIST CSF 2.0, CIS Controls, NIST SP 800-53.
• Proficient in GRC platforms such as ServiceNow GRC and Archer.

Responsabilidades

• Maintain technology policy hierarchy and support reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Support IT risk assessment program and IT risk register management.
• Perform control self-assessments across IAM, change, vulnerability, and data protection.
• Support Third-Party Risk Management and vendor due diligence.
• Assist regulatory examinations and audits, tracking findings to closure.
• Develop and report technology risk metrics and KRIs.
• Support AI governance activities including AI inventory and lifecycle controls.

Conhecimentos

GRC awareness

IT risk assessment

Policy governance

Regulatory compliance

Vendor due diligence

KRIs reporting

AI governance

NIST CSF

CIS Controls

SOX concepts

Formação académica

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Ferramentas

ServiceNow GRC

Archer

Microsoft Office

Descrição da oferta de emprego

WesBanco, Inc. in the United States seeks an experienced IT risk and governance professional to manage and enhance the enterprise GRC program. You will align technology controls with regulatory expectations and monitor risk posture across IT domains, third-party risk, and AI governance.

The role requires independence, strong communication, and multi-priority handling in a regulated financial institution. The ideal candidate has 4+ years of relevant experience, familiarity with GRC platforms