IT GRC Analyst II — Banking Risk & Compliance

WesBanco, Inc.; Huntington (WV); On-site; USD 85,000 - 115,000; Full time

Job summary

WesBanco, Inc. is seeking an IT Risk & Governance professional to support the enterprise GRC program. You will help ensure the bank's technology risk posture aligns with regulatory expectations, industry frameworks, and internal policies.

The role involves maintaining policy hierarchies, assisting with risk assessments, control self-assessments, vendor due diligence, and regulatory examinations. A bachelor’s degree and 2+ years of relevant experience are required, with CRISC/CISA/CISM or CISSP

Qualifications

• Bachelor''s degree in Information Systems, Business, Computer Science, or a related field.
• Minimum 2 years of relevant IT risk or compliance experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintains the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

Verbal communication

Written communication

Analytical skills

Problem solving

Time management

Education

Bachelor''s degree in Information Systems, Business, Computer Science, or related field

Tools

ServiceNow GRC

Archer

MS Office Suite

Job description

WesBanco, Inc. is seeking an IT Risk & Governance professional to support the enterprise GRC program. You will help ensure the bank's technology risk posture aligns with regulatory expectations, industry frameworks, and internal policies.

The role involves maintaining policy hierarchies, assisting with risk assessments, control self-assessments, vendor due diligence, and regulatory examinations. A bachelor’s degree and 2+ years of relevant experience are required, with CRISC/CISA/CISM or CISSP