IT GRC Analyst II – Risk, Policy & AI Governance

WesBanco, Inc.; Toledo (OH); Presencial; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

WesBanco, Inc. is seeking an IT GRC Professional who will support the enterprise governance, risk, and compliance program.

The role ensures technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, and CIS Controls. Candidate will manage policy hierarchy, risk assessments, and control monitoring across IT domains; contribute to TPRM and audits, and drive KRIs for governance committees.

Formación

• Bachelor's degree in IS/CS or related field, or equivalent education/experience.
• Minimum of 2 years of relevant IT risk/compliance experience.
• Certifications such as CRISC/CISA/CISM preferred.

Responsabilidades

• Maintains technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidelines.
• Supports IT risk assessments and IT risk register including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (IAM, change management, vulnerability mgmt, data protection).
• Supports Third-Party Risk Management–vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Fed) and audit engagements; tracks findings and remediation.
• Develops and reports technology risk metrics and KRIs for execs and governance bodies.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) incl. inventory and lifecycle controls.

Conocimientos

GRC expertise

Risk assessment

Regulatory compliance

Policy governance

Vendor risk

Educación

Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent education/experience

Herramientas

ServiceNow GRC

Archer

Office 365

Descripción del empleo

WesBanco, Inc. is seeking an IT GRC Professional who will support the enterprise governance, risk, and compliance program.

The role ensures technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, and CIS Controls. Candidate will manage policy hierarchy, risk assessments, and control monitoring across IT domains; contribute to TPRM and audits, and drive KRIs for governance committees.