Senior IT GRC & Risk Analyst

WesBanco, Inc.; Bowie (MD); On-site; USD 8,500 - 100,000; Full time

Benefits offered by this job

PTO 22 days

5 STD days

11 holidays + float

Job summary

WesBanco, Inc. is seeking an experienced IT Governance Analyst III to independently handle complex assignments and support the enterprise GRC program.

You will help ensure the bank's technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks such as NIST CSF 2.0, FFIEC, and CIS controls. You will maintain policy hierarchy, support risk assessments, perform control self-assessments, and assist with third-party risk management, regulatory examinations, and

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science or related field.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintain technology policy hierarchy and support reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Support IT risk assessment program and IT risk register including risk scoring and remediation workflows.
• Perform control self-assessments across IT domains (IAM, change management, vulnerability management, data protection).
• Support third-party risk management including vendor due diligence and monitoring.
• Assist regulatory examinations and audits, tracking findings to closure.
• Develop and report technology risk metrics and KRIs for governance committees.
• Support AI governance activities including AI inventory, risk tiering, and lifecycle controls.

Skills

GRC program management

Regulatory compliance

IT risk assessment

Policy & procedure development

Education

Bachelor's degree in Information Systems, Business, Computer Science

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an experienced IT Governance Analyst III to independently handle complex assignments and support the enterprise GRC program.

You will help ensure the bank's technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks such as NIST CSF 2.0, FFIEC, and CIS controls. You will maintain policy hierarchy, support risk assessments, perform control self-assessments, and assist with third-party risk management, regulatory examinations, and