IT GRC Analyst II: Policy, Compliance & AI Governance

WesBanco, Inc.; West Palm Beach (FL); On-site; USD 70,000 - 100,000; Full time

Job summary

WesBanco, Inc. in Florida seeks an IT Risk & GRC professional to support the enterprise IT governance, risk, and compliance program. You will help align the Bank's technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0, FFIEC IT, and CIS Controls.

You will maintain policy hierarchy, assist risk assessments, perform CSA across IT domains, support vendor risk management, regulatory examinations, and audits, and report KRIs for governance committees.

Qualifications

• Bachelor's degree or equivalent education/experience.
• Minimum of 2 years of IT risk, governance, or compliance experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.
• Familiarity with FFIEC, NIST CSF 2.0, CIS Controls, and NIST SP 800-53.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

Analytical thinking

Problem-solving

Decision-making

Interpersonal communication

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Equivalent education and/or experience

Tools

ServiceNow GRC

Archer

Microsoft Office

Job description

WesBanco, Inc. in Florida seeks an IT Risk & GRC professional to support the enterprise IT governance, risk, and compliance program. You will help align the Bank's technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0, FFIEC IT, and CIS Controls.

You will maintain policy hierarchy, assist risk assessments, perform CSA across IT domains, support vendor risk management, regulatory examinations, and audits, and report KRIs for governance committees.