Remote IT GRC & Risk Analyst III

WesBanco, Inc.; Wheeling (WV); Remote; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking an IT Governance Analyst III to support enterprise IT governance, risk, and compliance programs. The role focuses on aligning technology risk posture with regulatory expectations and industry frameworks such as NIST CSF 2.0, FFIEC, and CIS Controls.

The analyst will maintain policy hierarchies, assist with risk assessments and audits, and contribute to AI governance activities. Remote work within WesBanco's footprint is supported with occasional in-person meetings.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field, or equivalent education/experience.
• Minimum of 4 years of relevant experience required.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.
• Knowledge of NIST CSF 2.0, CIS Controls, FFIEC guidance.
• Familiarity with SOC 2 review processes, ITGC/SOX concepts, and cloud risk (AWS, Azure).
• Proficient in Microsoft Office applications.

Responsibilities

• Supports enterprise IT governance, risk, and compliance (GRC) program to align with regulatory expectations.
• Maintains technology policy hierarchy and supports reviews per NIST CSF 2.0, CIS Controls v8, FFIEC guidance.
• Supports IT risk assessment program and IT risk register including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (identity, access management, change, vulnerability, data protection).
• Supports Third-Party Risk Management including vendor due diligence and monitoring.
• Assists with regulatory examinations and internal/external audits, tracking findings to closure.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory and lifecycle controls.

Skills

IT governance

risk assessment

vendor due diligence

regulatory audits

KRIs

data protection

cybersecurity

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an IT Governance Analyst III to support enterprise IT governance, risk, and compliance programs. The role focuses on aligning technology risk posture with regulatory expectations and industry frameworks such as NIST CSF 2.0, FFIEC, and CIS Controls.

The analyst will maintain policy hierarchies, assist with risk assessments and audits, and contribute to AI governance activities. Remote work within WesBanco's footprint is supported with occasional in-person meetings.