Remote IT GRC Analyst II – Risk & Compliance

WesBanco; Wheeling (WV); Remote; USD 85.000 - 110.000; Vollzeit

Zusammenfassung

WesBanco is seeking an IT Risk & Governance professional to support the enterprise GRC program. This role focuses on aligning technology risk with regulatory expectations and industry frameworks, while maintaining policy hierarchy and risk assessments.

The position is remote within WesBanco's footprint, with occasional in-person meetings as needed. You will work under limited supervision to implement controls, monitor KRIs, and collaborate across IT and risk teams to strengthen the bank's cyber

Qualifikationen

• Bachelor's degree in Information Systems, Business, Computer Science, or related field; equivalent education/experience accepted.
• Minimum of 2 years of relevant IT/GRC experience.

Aufgaben

• Maintains technology policy hierarchy and supports reviews aligned to NIST CSF, CIS Controls, and FFIEC guidance.
• Supports IT risk assessment program and IT risk register including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (IAM, change mgmt, vulnerability mgmt, data protection).
• Supports Third-Party Risk Management including vendor due diligence and monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and audits; tracks findings and remediation.
• Develops technology risk metrics and KRIs for governance committees.
• Supports AI governance activities per NIST AI RMF and ISO/IEC 42001.

Kenntnisse

GRC platforms

IT risk management

Regulatory knowledge

Vendor risk management

Ausbildung

Bachelor's degree in Information Systems

Tools

ServiceNow GRC

Archer

AWS

Azure

Jobbeschreibung

WesBanco is seeking an IT Risk & Governance professional to support the enterprise GRC program. This role focuses on aligning technology risk with regulatory expectations and industry frameworks, while maintaining policy hierarchy and risk assessments.

The position is remote within WesBanco's footprint, with occasional in-person meetings as needed. You will work under limited supervision to implement controls, monitor KRIs, and collaborate across IT and risk teams to strengthen the bank's cyber