Senior IT GRC & Risk Analyst

Remote Jobs; Bowie (MD); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

PTO 22 days

Holidays 11

401(k) with match

Medical/Dental/Vision benefits

Job summary

WesBanco is seeking an IT Governance Analyst III to support the GRC program and ensure alignment with regulatory expectations across NIST CSF 2.0, FFIEC, and CIS Controls. The role emphasizes risk assessment, control self-assessments, and third-party risk management in a highly regulated banking environment.

Responsibilities include maintaining policy hierarchies, reporting KRIs, and supporting regulatory examinations with strong analytical, written, and presentation skills.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 4 years of relevant experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self-assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Skills

GRC knowledge

NIST CSF 2.0

CIS Controls v8

FFIEC guidance

IT risk assessment

TPRM

Regulatory exams

KRIs reporting

Education

Bachelor's degree in IS/CS/Business

Tools

ServiceNow GRC

Archer

Job description

WesBanco is seeking an IT Governance Analyst III to support the GRC program and ensure alignment with regulatory expectations across NIST CSF 2.0, FFIEC, and CIS Controls. The role emphasizes risk assessment, control self-assessments, and third-party risk management in a highly regulated banking environment.

Responsibilities include maintaining policy hierarchies, reporting KRIs, and supporting regulatory examinations with strong analytical, written, and presentation skills.