IT GRC Analyst II: Risk, Compliance & AI Governance

WesBanco, Inc.; Chattanooga (TN); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking a professional to support the enterprise IT governance, risk, and compliance program.

You will help ensure technology risk posture aligns with regulatory expectations, frameworks like NIST CSF 2.0 and FFIEC, and oversee risk metrics and AI governance activities. Responsibilities include maintaining policy hierarchies, supporting risk assessments, and coordinating with audits and examinations.

Qualifications

• Bachelor's degree or equivalent in IS/Business/CS.
• Minimum of 2 years of relevant IT risk/compliance experience.
• Professional certifications (CRISC, CISA, CISM, CGEIT, CISSP) preferred.

Responsibilities

• Maintain and update the technology policy hierarchy in line with NIST CSF 2.0, CIS Controls, FFIEC guidance.
• Support IT risk assessment program and IT risk register, including scoring and remediation workflows.
• Perform control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Support Third-Party Risk Management and vendor due diligence.
• Assist with regulatory examinations and audit engagements; track findings to closure.
• Develop and report technology risk metrics and KRIs for governance committees.
• Support AI governance activities and lifecycle controls (NIST AI RMF, ISO/IEC 42001).

Skills

GRC platforms

Regulatory knowledge

Analytical skills

Communication skills

Project management

Problem solving

Education

Bachelor's degree in Information Systems, Business, Computer Science

Tools

ServiceNow GRC

Archer

Microsoft Office

Job description

WesBanco, Inc. is seeking a professional to support the enterprise IT governance, risk, and compliance program.

You will help ensure technology risk posture aligns with regulatory expectations, frameworks like NIST CSF 2.0 and FFIEC, and oversee risk metrics and AI governance activities. Responsibilities include maintaining policy hierarchies, supporting risk assessments, and coordinating with audits and examinations.