IT GRC & Risk Analyst II

WesBanco, Inc.; Columbus (OH); In loco; USD 110.000 - 140.000; Tempo pieno

Descrizione del lavoro

WesBanco, Inc. seeks an IT Risk & Compliance professional to support the enterprise governance, risk, and compliance program.

You will help ensure technology risk aligns with regulatory expectations and industry frameworks, including NIST CSF 2.0, FFIEC, and CIS Controls. Responsibilities include maintaining policy hierarchy, supporting risk assessments and risk registers, performing control self-assessments, assisting third‑party risk management, audits, and reporting KRIs.

Competenze

• Bachelor's degree in Information Systems, Business, CS or related field.
• Minimum 2 years of relevant experience.
• Certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.

Mansioni

• Maintain technology policy hierarchy aligned to NIST CSF 2.0 and FFIEC guidance.
• Support IT risk assessment program and IT risk register.
• Perform control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Support Third-Party Risk Management including vendor due diligence.
• Assist regulatory examinations and audits, tracking findings and remediation.
• Develop and report technology risk metrics and KRIs for governance committees.
• Support AI governance activities including AI inventory and lifecycle controls.

Conoscenze

IT risk management

GRC platforms

Regulatory compliance

Risk assessment

Audit coordination

Vendor due diligence

KRIs reporting

AI governance

Analytical thinking

Communication skills

Formazione

Bachelor's degree in Information Systems, Business, Computer Science, or related field

2+ years of relevant experience

CRISC/CISA/CISM/CGEIT/CISSP certifications preferred

Strumenti

ServiceNow GRC

Archer

Microsoft Office

Descrizione del lavoro

WesBanco, Inc. seeks an IT Risk & Compliance professional to support the enterprise governance, risk, and compliance program.

You will help ensure technology risk aligns with regulatory expectations and industry frameworks, including NIST CSF 2.0, FFIEC, and CIS Controls. Responsibilities include maintaining policy hierarchy, supporting risk assessments and risk registers, performing control self-assessments, assisting third‑party risk management, audits, and reporting KRIs.