IT GRC Analyst II: Risk, Controls & Compliance

WesBanco, Inc.; Ironton (OH); Presencial; USD 70.000 - 100.000; Jornada completa

Descripción de la vacante

WesBanco, Inc. is seeking a security and compliance professional to support the enterprise IT governance, risk, and compliance program. You will maintain policy hierarchies, assist with risk assessments, control self-assessments, and support third-party risk management, regulatory examinations, and audit engagements.

Strong writing and presentation skills are required. The role requires a Bachelor's degree in a related field, at least 2 years of experience, and relevant certifications such as

Formación

• Bachelor's degree in Information Systems, Business, Computer Science, or a related field is required.
• Minimum of 2 years of relevant experience required.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsabilidades

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Conocimientos

NIST CSF 2.0

CIS Controls

FFIEC guidance

IT risk assessment

Risk register

CSA

TPRM

Vendor due diligence

Regulatory examinations

Audit engagements

KRIs and metrics

AI governance

ServiceNow GRC

Archer

Microsoft Office

Educación

Bachelor's degree in Information Systems, Business, Computer Science, or a related field

Equivalent education and/or experience

Herramientas

ServiceNow GRC

Archer

Microsoft Office

Descripción del empleo

WesBanco, Inc. is seeking a security and compliance professional to support the enterprise IT governance, risk, and compliance program. You will maintain policy hierarchies, assist with risk assessments, control self-assessments, and support third-party risk management, regulatory examinations, and audit engagements.

Strong writing and presentation skills are required. The role requires a Bachelor's degree in a related field, at least 2 years of experience, and relevant certifications such as