Senior IT GRC & Risk Analyst

WesBanco, Inc.; Chattanooga (TN); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking an experienced GRC professional to independently handle complex assignments and support enterprise IT governance, risk, and compliance.

The role ensures technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks including NIST CSF 2.0 and FFIEC IT guidelines. You will maintain policy hierarchy, perform risk assessments, support TPRM, assist with OCC/FDIC examinations, and report KRIs to governance committees.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or a related field, or equivalent education/experience.
• Minimum of 4 years of relevant experience in GRC or IT risk/compliance.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Supports enterprise IT governance, risk and compliance program.
• Maintains policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, FFIEC guidance.
• Performs IT risk assessments and maintains IT risk register, including risk scoring and remediation workflows.
• Executes control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Supports Third-Party Risk Management and vendor due diligence.
• Assists with regulatory exams (OCC, FDIC, Federal Reserve) and audits; tracks findings to closure.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities per NIST AI RMF and ISO/IEC 42001.

Skills

GRC governance

Regulatory compliance

Risk assessment

Analytical skills

Communication & presentation

Multitasking & deadlines

Independent contributor

Education

Bachelor's degree or equivalent (Info Systems/Business/CS)

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an experienced GRC professional to independently handle complex assignments and support enterprise IT governance, risk, and compliance.

The role ensures technology risk posture aligns with regulatory expectations, risk appetite, and industry frameworks including NIST CSF 2.0 and FFIEC IT guidelines. You will maintain policy hierarchy, perform risk assessments, support TPRM, assist with OCC/FDIC examinations, and report KRIs to governance committees.