IT GRC Analyst II — Policy, Risk & Compliance

WesBanco, Inc.; New Albany (IN); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. in the United States seeks a Governance, Risk, and Compliance professional to support enterprise IT GRC, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0 and FFIEC.

The role covers policy hierarchy, IT risk assessment, control self-assessments, Third-Party Risk Management, regulatory examinations, and KRIs reporting to leadership.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum 2 years of relevant IT risk/compliance experience.
• Knowledge of OCC, FDIC, Fed rules and IT governance concepts.
• Familiarity with FFIEC IT Handbook, NIST CSF 2.0, CIS Controls, and NIST SP 800-53.
• Certification such as CRISC/CISA/CISM/CGEIT/CISSP preferred.
• Strong written and verbal communication; able to present to governance bodies.
• Proficiency with GRC tools (ServiceNow GRC, Archer) and MS Office.

Responsibilities

• Maintains technology policy hierarchy and supports reviews aligned to NIST CSF 2.0 and FFIEC.
• Supports IT risk assessment program and IT risk register with scoring and remediation workflows.
• Performs control self-assessments across IT domains (IAM, change mgmt, vulnerability mgmt, data protection).
• Supports Third-Party Risk Management with vendor due diligence and monitoring.
• Assists with OCC/FDIC/Federal Reserve examinations and audits, tracking findings to closure.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities per NIST AI RMF and ISO/IEC 42001.

Skills

IT risk management

Regulatory knowledge

GRC platforms

Policy management

Audit support

Analytical thinking

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Minimum 2 years of relevant experience

Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. in the United States seeks a Governance, Risk, and Compliance professional to support enterprise IT GRC, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0 and FFIEC.

The role covers policy hierarchy, IT risk assessment, control self-assessments, Third-Party Risk Management, regulatory examinations, and KRIs reporting to leadership.