Strategic IT GRC Lead — Banking Risk & Compliance

WesBanco, Inc.; Uniontown (OH); Sur place; USD 90 000 - 130 000; Plein temps

Résumé du poste

WesBanco, Inc. is seeking an experienced IT GRC professional to support the enterprise governance, risk, and compliance program. The role focuses on aligning technology risk with regulatory expectations and industry frameworks such as NIST CSF and FFIEC IT Examination Handbook.

The ideal candidate will maintain the policy hierarchy, assist with risk assessments, and contribute to audit and regulatory examinations. Strong analytical skills and familiarity with GRC platforms are essential.

Qualifications

• Bachelor's degree in Information Systems, Business, Computer Science, or related field.
• Minimum of 4 years of relevant experience.
• Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP preferred.
• Experience in a regulated financial institution preferred.
• Working knowledge of GRC platforms (e.g., ServiceNow GRC, Archer) and control/evidence workflows.

Responsabilités

• Maintains enterprise IT governance, risk, and compliance (GRC) program alignment with regulatory expectations.
• Supports IT risk assessment, risk register, scoring, and remediation workflows.
• Performs control self-assessments across IT domains such as IAM, change, vulnerability, and data protection.
• Assists with Third-Party Risk Management including due diligence and monitoring.
• Supports regulatory examinations and audits, tracks findings to closure.
• Develops and reports technology risk metrics for management and governance committees.
• Oversees AI governance activities (NIST AI RMF, ISO/IEC 42001) including inventory and lifecycle controls.

Connaissances

GRC knowledge

Regulatory compliance

Risk management

Vendor risk management

Policy management

Formation

Bachelor's degree in Information Systems, Business, Computer Science, or related field

Outils

GRC platforms (ServiceNow GRC, Archer)

Description du poste

WesBanco, Inc. is seeking an experienced IT GRC professional to support the enterprise governance, risk, and compliance program. The role focuses on aligning technology risk with regulatory expectations and industry frameworks such as NIST CSF and FFIEC IT Examination Handbook.

The ideal candidate will maintain the policy hierarchy, assist with risk assessments, and contribute to audit and regulatory examinations. Strong analytical skills and familiarity with GRC platforms are essential.