IT Governance Analyst II (GRC & Cybersecurity Risk Management)

wesbanco • United State

Remote

Apply Now

AI Summary

Remote IT Governance Analyst II supporting WesBanco’s enterprise IT risk, compliance, and governance program. Aligns technology risk posture with NIST CSF 2.0, FFIEC, and CIS Controls while managing risk assessments, controls, and regulatory reporting. Requires 2+ years of experience in GRC, deep knowledge of IT risk frameworks, and proficiency in GRC platforms.

Key Highlights

100% remote role with occasional in-person meetings

Aligns IT risk posture with NIST CSF 2.0, FFIEC IT Handbook, and CIS Controls v8

Manages IT risk assessments, control self-assessments, and regulatory compliance tracking

Key Responsibilities

Maintain and review the technology policy hierarchy (policies, standards, procedures, controls) aligned with NIST CSF 2.0, CIS Controls v8, and FFIEC guidance

Support IT risk assessments, maintain the IT risk register, and manage risk scoring, treatment plans, and exception workflows

Perform control self-assessments (CSAs) across IT domains such as identity and access management, change management, vulnerability management, and data protection

Assist with regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audits, tracking findings and remediation to closure

Develop and report technology risk metrics and key risk indicators (KRIs) for governance committees

Support AI governance activities, including AI inventory, risk tiering, and lifecycle controls

Interested in remote work opportunities in IT & Network Engineering? Discover IT & Network Engineering Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

IT Governance, Risk, and Compliance (GRC) NIST CSF 2.0 and FFIEC IT Examination Handbook GRC Platforms (e.g., ServiceNow GRC)

Benefits & Perks

$80,000 - $95,000 annual salary

22 days PTO, 5 days STD, 11 paid holidays, 1 float holiday

Comprehensive benefits including medical, dental, vision, 401(k) with match, and voluntary insurance options

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Professional certifications such as CRISC, CISA, CISM, CGEIT, or CISSP

Familiarity with SOC 2 review processes, ITGC/SOX concepts, and cloud risk considerations (AWS, Azure)

Experience with NIST AI RMF and ISO/IEC 42001

Job Description

This position is 100% remote within the Bank's footprint. Employee will work full time remote outside of a WesBanco location (may occasionally attend in person meetings, although primary functions of the role are performed remotely),Performs a range of tasks of moderate complexity under limited supervision, applying developing expertise and sound judgment. Responsible for supporting the enterprise IT governance, risk, and compliance (GRC) program, helping ensure the Bank's technology risk posture aligns to regulatory expectations, enterprise risk appetite, and industry frameworks including NIST CSF 2.0, the FFIEC IT Examination Handbook, CIS Controls v8, and the CRI Profile.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.