Senior IT GRC Analyst: Policy, Risk & Compliance

WesBanco, Inc.; Huntington (WV); On-site; USD 90,000 - 140,000; Full time

Job summary

WesBanco, Inc. seeks an experienced IT risk and governance specialist to support the enterprise IT governance, risk, and compliance program.

The role ensures technology risk posture aligns with regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, CIS Controls v8, and CRI profiles. The successful candidate will maintain policy hierarchy, assist with IT risk assessments and risk registers, perform CSAs, support TPRM, and contribute

Qualifications

• Bachelor’s degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.

Responsibilities

• Maintain the technology policy hierarchy (policy, standard, procedure, control).
• Support IT risk assessment program and IT risk register, including risk scoring and treatment plans.
• Perform control self-assessments across IT domains (identity/access, change, vulnerability, data protection).
• Support Third-Party Risk Management activities, including vendor due diligence and monitoring.
• Assist regulatory examinations (OCC, FDIC, Fed) and internal/external audits; track findings and remediation.
• Develop and report technology risk metrics and KRIs for management and governance committees.
• Support AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory and lifecycle controls.

Skills

GRC knowledge

Risk assessment

NIST CSF 2.0

CIS Controls v8

FFIEC guidance

Third-Party Risk

Audit support

AI governance

GRC platforms

ServiceNow GRC

Archer

AWS/Azure risk

MS Office

Education

Bachelor’s degree in IS/CS or related field

Tools

ServiceNow GRC

Archer

AWS

Azure

Job description

WesBanco, Inc. seeks an experienced IT risk and governance specialist to support the enterprise IT governance, risk, and compliance program.

The role ensures technology risk posture aligns with regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Handbook, CIS Controls v8, and CRI profiles. The successful candidate will maintain policy hierarchy, assist with IT risk assessments and risk registers, perform CSAs, support TPRM, and contribute