IT GRC Analyst III: Risk, Compliance & Policy

WesBanco, Inc.; Fort Wayne (IN); Presencial; USD 90.000 - 140.000; Jornada completa

Descripción de la vacante

WesBanco, Inc. is seeking an experienced IT GRC professional to independently manage complex assignments and support the enterprise IT governance, risk and compliance program.

You will help ensure technology risk posture aligns with regulatory expectations and industry frameworks. Responsibilities include maintaining policy hierarchies, supporting risk assessments, control self-assessments, third-party risk, audits, and AI governance.

Formación

• Bachelors in IS, business, CS, or related field required.
• Minimum 4 years of relevant experience in GRC or risk.
• Experience in a regulated financial institution preferred.
• Certifications such as CRISC/CISA/CISM/CGEIT/CISSP preferred.

Responsabilidades

• Maintains technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls, FFIEC guidance.
• Supports IT risk assessment program and IT risk register management.
• Performs control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Supports Third-Party Risk Management including vendor due diligence and monitoring.
• Assists with OCC/FDIC/external audits and tracks findings to remediation.
• Develops technology risk metrics and KRIs for governance committees.
• Supports AI governance activities including AI inventory and lifecycle controls.

Conocimientos

GRC frameworks

NIST CSF 2.0

CIS Controls

SOC 2 knowledge

MS Office

Policy knowledge

Educación

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Herramientas

ServiceNow GRC

Archer

Descripción del empleo

WesBanco, Inc. is seeking an experienced IT GRC professional to independently manage complex assignments and support the enterprise IT governance, risk and compliance program.

You will help ensure technology risk posture aligns with regulatory expectations and industry frameworks. Responsibilities include maintaining policy hierarchies, supporting risk assessments, control self-assessments, third-party risk, audits, and AI governance.