SVP & Director of IT Governance - Cyber Security

SVP & Director of IT Governance
- Cyber Security

#51-9409

Multiple Locations

This position is 100% remote within the Bank's footprint. Employee will work full time remote outside of a Wes Banco location (may occasionally attend in person meetings, although primary functions of the role are performed remotely).

Wheeling

37.5

Bachelor’s degree in Information Systems, Computer Science, Business, or related field and/or equal education or experience required

Minimum of 10 years of progressive experience in IT risk, GRC, cybersecurity, or technology audit required.

Minimum of 3 years in a leadership or program management required.

Minimum of 5 years of experience in a regulated financial institution (bank, credit union, or bank holding company); community or regional bank experience preferred.

Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), Certified Information Systems Auditor (CISA), or Certified Risk & Information Systems Control (CRISC) are desirable.

Provides strategic leadership and operational oversight of the Bank's technology governance, risk management, and compliance (GRC) program. Serves as a primary liaison among Technology, Risk, Audit, and executive leadership to ensure the technology risk posture aligns to regulatory expectations, enterprise risk appetite, and industry frameworks. Requires deep expertise in banking technology regulations, enterprise risk frameworks, and control design, balanced with the executive presence to communicate complex risk themes to technical and non-technical audiences, including Board-level committees.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Owns andmaturesthe enterprise IT GRC program, including policies, standards, procedures, and control frameworks aligned to NIST CSF 2.0, CIS Controls v8, FFIEC CAT/Architecture, and applicable regulatory guidance (OCC, FDIC, Federal Reserve).

Establishes andmaintainsthe technology policy hierarchy (policy → standard → procedure → control) with defined ownership and periodic review cadence.

Serves as program owner for the technology governance council structure (e.g., IT Steering, Technology Risk), including agenda-setting, reporting, and action item tracking.

Operationalizes AI governance standards (NIST AI RMF, ISO/IEC 42001), including AI inventory, risk tiering, lifecycle controls, and oversight of vendor AI use cases.

Directs the enterprise technology risk assessment program (annual and event-driven) across infrastructure, applications, data, cloud, and third-party environments; ensuremethodologyaligns to ERM/RCSA and risk appetite.

Maintains and evolves the IT risk register, including risk identification, scoring, ownership, treatment plans, and risk acceptance/exceptionworkflows.

Leads risk assessment and advisory activities for emerging technologies (AI/ML, cloud, RPA), translating technical exposures into business impact and decision options.

Develops and reports technology risk metrics and KRIs for senior leadership and Board committees; drive a data-driven risk culture.

Serves as the primary IT GRC point of contact for regulatory examinations (OCC, FDIC, Federal Reserve) and internal/external audit engagements related to technology, cybersecurity, and operational risk.

Monitors and interprets evolving regulatory requirements and supervisory guidance (FFIEC, SR…