IT GRC Analyst II: Governance, Risk & Compliance

WesBanco, Inc.; Uniontown (OH); On-site; USD 75,000 - 110,000; Full time

Job summary

WesBanco, Inc. is seeking a professional to support the enterprise IT governance, risk, and compliance program.

The role focuses on aligning technology risk posture with regulatory expectations, industry frameworks such as NIST CSF 2.0, FFIEC, and CIS Controls, while contributing to risk metrics and AI governance lifecycle controls. The ideal candidate has a bachelor's degree in a related field, at least 2 years of experience, and relevant risk/compliance certifications.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 2 years of relevant experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports IT risk assessment program and IT risk register with risk scoring, treatment plans, and workflow management.
• Performs control self-assessments across IT domains including identity, access, change, vulnerability, and data protection.
• Supports Third-Party Risk Management through vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations and audits, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities including AI inventory, risk tiering, and lifecycle controls.

Skills

Analytical thinking

Problem solving

Communication skills

Team player

Time management

Presentation skills

Education

Bachelor's degree in Information Systems or related field

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking a professional to support the enterprise IT governance, risk, and compliance program.

The role focuses on aligning technology risk posture with regulatory expectations, industry frameworks such as NIST CSF 2.0, FFIEC, and CIS Controls, while contributing to risk metrics and AI governance lifecycle controls. The ideal candidate has a bachelor's degree in a related field, at least 2 years of experience, and relevant risk/compliance certifications.