Senior IT GRC & Risk Analyst

WesBanco, Inc.; Parkersburg (WV); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. is seeking an experienced IT Risk & GRC professional to support the enterprise governance, risk and compliance program.

This role ensures technology risk posture aligns with regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Examination Handbook, and CIS Controls v8. The ideal candidate will perform control self-assessments, support IT risk assessments, and assist with third-party risk management, audits, and regulatory

Qualifications

• Bachelor's degree or equivalent education/experience required.
• Minimum of 4 years of relevant experience.
• Experience in a regulated financial institution preferred.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy and supports reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports IT risk assessment program and IT risk register, including risk scoring and remediation workflows.
• Performs control self-assessments across IT domains (identity/access management, change management, vulnerability management, data protection).
• Supports Third-Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and audits, tracking findings and remediation.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001).

Skills

Regulatory knowledge

Analytical thinking

Problem-solving

Communication skills

Multitasking

Teamwork

Independent work

GRC platforms

AI governance

Education

Bachelor's degree in Information Systems/Business/CS

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an experienced IT Risk & GRC professional to support the enterprise governance, risk and compliance program.

This role ensures technology risk posture aligns with regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, FFIEC IT Examination Handbook, and CIS Controls v8. The ideal candidate will perform control self-assessments, support IT risk assessments, and assist with third-party risk management, audits, and regulatory