IT GRC Analyst II: Risk, Compliance & AI Governance

WesBanco, Inc.; Indianapolis (IN); Presencial; USD 90.000 - 140.000; Jornada completa

Descripción de la vacante

WesBanco, Inc. is seeking an IT Risk & GRC professional to support the enterprise governance, risk and compliance program. You will help ensure technology risk aligns with regulatory expectations and industry frameworks, including NIST CSF 2.0, FFIEC guidance, and CIS Controls v8.

The role involves maintaining policy hierarchy, supporting risk assessments and control self-assessments, and assisting with regulator examinations and audits. Familiarity with GRC platforms and cloud risk is a plus.

Formación

• Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent education/experience.
• Minimum of 2 years of relevant IT risk, governance or compliance experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.
• Banking with regulatory frameworks and audit awareness is a plus.

Responsabilidades

• Maintains the technology policy hierarchy (policy, standard, procedure, control) aligned to NIST CSF 2.0, CIS Controls v8, FFIEC guidance.
• Supports IT risk assessment program and IT risk register, including scoring and remediation workflows.
• Performs control self-assessments across IT domains like identity, access, change, vulnerability, and data protection.
• Supports Third-Party Risk Management including vendor due diligence and ongoing monitoring.
• Assists with OCC, FDIC, Federal Reserve examinations and internal/external audits; tracks findings to closure.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including inventory, risk tiering, and lifecycle controls.

Conocimientos

Analytical thinking

Problem solving

Verbal communication

Written communication

Presentation skills

Time management

Interpersonal relations

Ability to work across levels

Educación

Bachelor's degree in Information Systems, Business, Computer Science

Herramientas

ServiceNow GRC

Archer

Descripción del empleo

WesBanco, Inc. is seeking an IT Risk & GRC professional to support the enterprise governance, risk and compliance program. You will help ensure technology risk aligns with regulatory expectations and industry frameworks, including NIST CSF 2.0, FFIEC guidance, and CIS Controls v8.

The role involves maintaining policy hierarchy, supporting risk assessments and control self-assessments, and assisting with regulator examinations and audits. Familiarity with GRC platforms and cloud risk is a plus.