Senior IT Governance & Risk Analyst

WesBanco, Inc.; Frankfort (KY); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking an experienced IT Governance, Risk, and Compliance (GRC) professional to independently handle complex assignments and contribute as an experienced individual contributor.

The role supports the bank's enterprise GRC program to align technology risk posture with regulatory expectations, enterprise risk appetite, and industry frameworks. You will maintain policy hierarchy, support risk assessments and risk register management, perform control self-assessments, and assist

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or a related field.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.
• Familiarity with FFIEC IT Examination Handbook, NIST CSF 2.0, CIS Controls, and NIST SP 800-53.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control).
• Supports IT risk assessment program and IT risk register, including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (identity/access, change, vulnerability, data protection).
• Supports Third-Party Risk Management (TPRM) including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and audit engagements; tracks findings and remediation.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) and related lifecycle controls.

Skills

GRC governance

Risk assessment

IT risk management

Regulatory compliance

Audit support

Education

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an experienced IT Governance, Risk, and Compliance (GRC) professional to independently handle complex assignments and contribute as an experienced individual contributor.

The role supports the bank's enterprise GRC program to align technology risk posture with regulatory expectations, enterprise risk appetite, and industry frameworks. You will maintain policy hierarchy, support risk assessments and risk register management, perform control self-assessments, and assist