Remote SVP: IT Governance & Cyber Risk Leadership

WesBanco, Inc.; Bowie (MD); Hybrid; USD 150,000 - 160,000; Full time

Benefits offered by this job

27 days PTO

11 annual holidays

401(k) with employer match

Job summary

WesBanco is seeking an SVP & Director of IT Governance - Cyber Security to lead the Bank's technology governance, risk management, and compliance program. The role requires executive presence to communicate risk to technical and non‑technical audiences, including Board committees.

The position manages IT GRC, policy hierarchy, vendor risk, AI governance, and regulatory examinations, with a focus on robust controls, risk metrics, and governance structures.

Qualifications

• Bachelor’s degree and/or equal education or experience required.
• Minimum of 10 years of progressive experience in IT risk, GRC, cybersecurity, or technology audit.
• Minimum of 3 years in a leadership or program management role.
• Minimum of 5 years of experience in a regulated financial institution (bank, credit union, or bank holding company).

Responsibilities

• Owns and matures the enterprise IT GRC program and control framework aligned to NIST CSF 2.0, CIS Controls, and FFIEC guidance.
• Manages technology audit and exam findings remediation with clear ownership and timelines.
• Leads the technology governance council structure and reports on progress to executive leadership and boards.
• Models risk and regulatory requirements and translates them into actionable obligations and control updates.
• Champions AI governance standards and third‑party risk management across vendors and cloud providers.

Skills

IT governance

Cyber security

Risk management

Regulatory compliance

Leadership

Education

Bachelor's degree in Information Systems, Computer Science, Business or related field

Tools

ServiceNow GRC

Archer

Job description

WesBanco is seeking an SVP & Director of IT Governance - Cyber Security to lead the Bank's technology governance, risk management, and compliance program. The role requires executive presence to communicate risk to technical and non‑technical audiences, including Board committees.

The position manages IT GRC, policy hierarchy, vendor risk, AI governance, and regulatory examinations, with a focus on robust controls, risk metrics, and governance structures.