Remote IT Governance & Risk Analyst (GRC)

WesBanco; Bowie (MD); Remote; USD 85,000 - 100,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

PTO 22 days

Holidays and float day

STD 5 days

Job summary

WesBanco is seeking an IT Governance Analyst III to support the enterprise GRC program, ensuring technology risk aligns with regulatory expectations and industry standards. This remote role operates 100% within the Bank's footprint, with occasional in-person meetings as needed.

The role independently handles complex assignments and contributes to policy hierarchy, risk metrics, and third-party risk management in a regulated banking environment.

Qualifications

• Bachelor's degree required in Information Systems, Computer Science, or related field, or equivalent experience.
• Minimum of 4 years of relevant experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.
• Experience with IT governance, risk and compliance (GRC) programs is essential.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintains the IT risk register, including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (identity/access management, change, vulnerability, data protection).
• Supports Third-Party Risk Management (TPRM) including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and audits, tracking findings to closure.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory and lifecycle controls.

Skills

GRC knowledge

Regulatory compliance

Risk assessment

Vendor risk management

AI governance

Education

Bachelor's degree in Information Systems/Computer Science

Tools

ServiceNow GRC

Archer

Job description

WesBanco is seeking an IT Governance Analyst III to support the enterprise GRC program, ensuring technology risk aligns with regulatory expectations and industry standards. This remote role operates 100% within the Bank's footprint, with occasional in-person meetings as needed.

The role independently handles complex assignments and contributes to policy hierarchy, risk metrics, and third-party risk management in a regulated banking environment.