Strategic IT Risk & Governance Leader

S&T Bancorp, Inc.; Pittsburgh (Allegheny County); On-site; USD 75,000 - 185,000; Full time

Job summary

S&T Bank in Pittsburgh is seeking a senior leader to oversee IT governance, risk management, and regulatory compliance. This role ensures controls are embedded in technology planning, project delivery, and operations while coordinating with Enterprise Risk Management, Compliance, Audit, and Legal.

The position requires 5–10 years of experience in banking technology risk management, IT governance, audits, and regulatory examinations, with a strong track record in cloud/SaaS governance and

Qualifications

• Requires a four-year college degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, or related discipline.
• Preferred CRISC, CISA, CGEIT certifications are a plus.

Responsibilities

• Oversees governance, risk management, compliance, and control framework for the IT organization.
• Acts as liaison between IT, risk, compliance, audit, security, legal, and regulators.
• Leads governance and risk management for AI, automation, and emerging tech.
• Coordinates audits, regulatory examinations, and remediation tracking.
• Develops and maintains IT risk and control self-assessments (RCSAs).
• Drives control optimization through process improvements and automation.

Skills

IT governance

Risk management

Regulatory compliance

Audit coordination

Cross-functional liaison

Education

Four-year college degree in Information Technology, Cybersecurity, Information Systems, Risk Management, or related discipline

Preferred CRISC, CISA, CGEIT certifications

Job description

S&T Bank in Pittsburgh is seeking a senior leader to oversee IT governance, risk management, and regulatory compliance. This role ensures controls are embedded in technology planning, project delivery, and operations while coordinating with Enterprise Risk Management, Compliance, Audit, and Legal.

The position requires 5–10 years of experience in banking technology risk management, IT governance, audits, and regulatory examinations, with a strong track record in cloud/SaaS governance and