IT GRC & Risk Analyst II

WesBanco, Inc.; Findlay (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

WesBanco, Inc. seeks an IT Risk & GRC professional to support governance, risk management, and compliance programs. You will help align technology risk posture with regulatory expectations, industry frameworks, and enterprise risk appetite.

The role covers policy maintenance, risk assessments, audits, and AI governance considerations. The ideal candidate has 2+ years in IT risk or GRC, familiarity with FFIEC/NIST/CIS controls, and relevant certifications.

Qualifications

• Bachelor's degree or equivalent in IS/Business/CS.
• Minimum 2 years IT risk or GRC experience.
• Professional certifications preferred (CRISC/CISA/CISM/CGEIT/CISSP).
• Knowledge of FFIEC, NIST CSF 2.0, CIS Controls, NIST SP 800-53.
• Experience with SOC 2, ITGC/SOX, cloud risk (AWS/Azure).

Responsibilities

• Maintain policy hierarchy aligned to NIST CSF 2.0 and FFIEC guidance.
• Support IT risk assessment program and IT risk register.
• Perform control self-assessments across IT domains.
• Support Third-Party Risk Management and vendor due diligence.
• Assist regulatory examinations and audits, track findings.
• Develop and report technology risk metrics and KRIs.
• Support AI governance activities per NIST AI RMF & ISO 42001.

Skills

Policy & governance

IT risk assessment

Control self-assessments

Third-Party risk mgmt

Regulatory audits

Risk metrics & KRIs

AI governance

Communication & teamwork

Regulatory compliance awareness

Education

Bachelor's degree in Information Systems/Business/Computer Science or equivalent

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. seeks an IT Risk & GRC professional to support governance, risk management, and compliance programs. You will help align technology risk posture with regulatory expectations, industry frameworks, and enterprise risk appetite.

The role covers policy maintenance, risk assessments, audits, and AI governance considerations. The ideal candidate has 2+ years in IT risk or GRC, familiarity with FFIEC/NIST/CIS controls, and relevant certifications.