Senior IT GRC & Risk Analyst

WesBanco, Inc.; Youngstown (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. seeks an experienced IT Governance, Risk and Compliance (GRC) professional to support the enterprise GRC program, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0 and FFIEC IT Examination Handbook.

The role entails maintaining policy hierarchy, performing risk assessments, and coordinating audits, vendor risk, and KRIs, with a focus on data protection, IAM, and cloud risk considerations.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or a related field, or equivalent education and/or experience required.
• Minimum of 4 years of relevant experience required.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP are preferred.

Responsibilities

• Maintains the technology policy hierarchy (policy, standard, procedure, control) and support periodic reviews aligned to NIST CSF 2.0, CIS Controls v8, and FFIEC guidance.
• Supports the IT risk assessment program and maintain the IT risk register, including risk scoring, treatment plans, and exception/acceptance workflows.
• Performs control self‑assessments (CSA) across IT domains such as identity and access management, change management, vulnerability management, and data protection.
• Supports the technology and cybersecurity components of Third‑Party Risk Management (TPRM), including vendor due diligence and ongoing monitoring.
• Assists with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements, tracking findings and remediation to closure.
• Develops and reports technology risk metrics and key risk indicators (KRIs) for management and governance committees.
• Supports AI governance activities (NIST AI RMF, ISO/IEC 42001) including AI inventory, risk tiering, and lifecycle controls.

Job description

WesBanco, Inc. seeks an experienced IT Governance, Risk and Compliance (GRC) professional to support the enterprise GRC program, aligning technology risk posture with regulatory expectations and industry frameworks including NIST CSF 2.0 and FFIEC IT Examination Handbook.

The role entails maintaining policy hierarchy, performing risk assessments, and coordinating audits, vendor risk, and KRIs, with a focus on data protection, IAM, and cloud risk considerations.