IT GRC Analyst II: Risk, Compliance & AI Governance

WesBanco, Inc.; Fort Wayne (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

WesBanco, Inc. in Fort Wayne, IN seeks an IT Risk & GRC professional to support enterprise governance, risk, and compliance programs, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, and CIS Controls.

You will maintain policy hierarchy, assist with risk assessments, control self-assessments, and vendor due diligence, while supporting regulatory examinations and audit activities.

Qualifications

• Bachelor's degree or equivalent education/experience required.
• Minimum 2 years of relevant experience required.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

Analytical thinking

Problem solving

Effective communication

Regulatory knowledge

Detail oriented

Collaboration

Project management

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Tools

ServiceNow GRC

Archer

Microsoft Office

Job description

WesBanco, Inc. in Fort Wayne, IN seeks an IT Risk & GRC professional to support enterprise governance, risk, and compliance programs, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, and CIS Controls.

You will maintain policy hierarchy, assist with risk assessments, control self-assessments, and vendor due diligence, while supporting regulatory examinations and audit activities.