Senior IT GRC & Risk Analyst

WesBanco, Inc.; Findlay (OH); Presencial; USD 110 000 - 140 000; Tempo integral

Resumo da oferta

WesBanco, Inc. in the United States seeks an experienced IT GRC professional to support the enterprise governance, risk, and compliance program.

You will apply advanced knowledge to align the Bank's technology risk posture with regulatory expectations and industry frameworks. Responsibilities include maintaining policy hierarchy, IT risk assessments, third‑party risk management, and assisting regulatory examinations, audits, and KRIs reporting.

Qualificações

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 4 years of relevant experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.

Responsabilidades

• Maintain technology policy hierarchy and align with NIST CSF 2.0, CIS Controls v8, FFIEC guidance.
• Support IT risk assessment program and IT risk register management.
• Perform control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Assist with Third-Party Risk Management and vendor due diligence.
• Support regulatory examinations and audits, track findings to closure.
• Develop and report technology risk metrics and KRIs for governance committees.
• Support AI governance activities (NIST AI RMF, ISO/IEC 42001) including inventory and lifecycle controls.

Conhecimentos

Policy management

IT risk assessment

CSA

TPRM

Regulatory examinations

KRIs reporting

AI governance

GRC platforms

NIST CSF

CIS Controls

Formação académica

Bachelor's degree in Information Systems/Business/CS

Ferramentas

ServiceNow GRC

RSA Archer

Descrição da oferta de emprego

WesBanco, Inc. in the United States seeks an experienced IT GRC professional to support the enterprise governance, risk, and compliance program.

You will apply advanced knowledge to align the Bank's technology risk posture with regulatory expectations and industry frameworks. Responsibilities include maintaining policy hierarchy, IT risk assessments, third‑party risk management, and assisting regulatory examinations, audits, and KRIs reporting.