Senior IT GRC & Risk Analyst

WesBanco, Inc.; Pittsburgh (Allegheny County); On-site; USD 110,000 - 160,000; Full time

Job summary

WesBanco, Inc. is seeking an experienced IT risk and compliance professional to support the enterprise GRC program and align the Bank's technology risk posture with regulatory expectations and industry frameworks.

You will maintain the policy hierarchy, perform risk assessments, support third-party risk management and audits, develop KRIs, and assist regulatory examinations to ensure effective controls and governance across IT.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 4 years of relevant experience in IT risk/compliance.

Responsibilities

• Maintains the technology policy hierarchy aligned to NIST CSF 2.0, CIS Controls v8, FFIEC guidance.
• Supports IT risk assessment program and IT risk register including risk scoring and treatment plans.
• Performs control self-assessments across IT domains (identity/access, change, vulnerability, data protection).
• Supports Third-Party Risk Management including vendor due diligence and monitoring.
• Assists with regulatory examinations (OCC, FDIC, Fed) and audits, tracking findings to closure.
• Develops and reports technology risk metrics and KRIs for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including inventory and lifecycle controls.

Skills

IT governance

Regulatory compliance

Risk assessment

Vendor due diligence

AI governance

KRIs & metrics

Cloud risk management

Audit support

Communication skills

MS Office

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

Job description

WesBanco, Inc. is seeking an experienced IT risk and compliance professional to support the enterprise GRC program and align the Bank's technology risk posture with regulatory expectations and industry frameworks.

You will maintain the policy hierarchy, perform risk assessments, support third-party risk management and audits, develop KRIs, and assist regulatory examinations to ensure effective controls and governance across IT.