Strategic IT GRC & Risk Analyst

WesBanco, Inc.; West Palm Beach (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

WesBanco, Inc. seeks an experienced IT Governance, Risk, and Compliance professional to independently handle complex assignments and strengthen the bank’s technology risk posture.

You will align IT controls with regulatory expectations, enterprise risk appetite, and frameworks including NIST CSF 2.0, FFIEC IT Handbook, CIS Controls, and CRI profiles, while supporting GRC programs across the enterprise. Ideal candidates bring 4+ years of relevant experience, familiarity with SOC 2, ITGC/SOX,

Qualifications

• Bachelor's degree or equivalent education/experience.
• Minimum of 4 years of relevant experience.
• Professional certifications preferred (CRISC, CISA, CISM, CGEIT, or CISSP).

Responsibilities

• Maintains the technology policy hierarchy and supports periodic reviews.
• Supports IT risk assessment program and IT risk register inclusion.
• Performs control self-assessments across IT domains (IAM, change, vulnerability, data protection).
• Supports Third‑Party Risk Management including vendor due diligence.
• Assists with regulatory examinations and internal/external audits; tracks findings and remediation.
• Develops and reports technology risk metrics and KRIs for governance committees.
• Supports AI governance activities including AI inventory, risk tiering, lifecycle controls.

Skills

Policy governance

Risk assessment

Regulatory knowledge

Communication

Analytical thinking

Multi-tasking

Independent work

Education

Bachelor's degree in Information Systems/Business/CS or related

Tools

ServiceNow GRC

Archer

ITGC/SOX concepts

Job description

WesBanco, Inc. seeks an experienced IT Governance, Risk, and Compliance professional to independently handle complex assignments and strengthen the bank’s technology risk posture.

You will align IT controls with regulatory expectations, enterprise risk appetite, and frameworks including NIST CSF 2.0, FFIEC IT Handbook, CIS Controls, and CRI profiles, while supporting GRC programs across the enterprise. Ideal candidates bring 4+ years of relevant experience, familiarity with SOC 2, ITGC/SOX,