Internal Control Testing

Mizuho•New York, NY

1d•Hybrid

About The Position

Business Risk and Control (BRC) is a 1st line of defense Operational Risk team responsible for identifying, assessing, monitoring, and controlling operational risk for all businesses and legal entities across Mizuho U.S. Operations (MUSO). The Business Risk and Control team collaborates with the various business/entities and related support functions to manage operational risk and conducts reporting at the business line/entity level. Business Risk and Control is responsible for managing and implementing the MUSO Internal Control Testing (ICT) program, which assesses key controls across the firm for both design and operating effectiveness. Internal controls serve as a component of the first line of defense in mitigating risks, maintaining the integrity of financial and accounting information, promoting accountability, and preventing fraud. As such, they are an integral component of MUSO’s day-to-day execution of its business operations. To align with industry’s best practices and ensure the firm maintains a robust control environment, MUSO has developed a first line, risk based Internal Controls Testing (ICT) Program. As Business Risk and Control ICT Vice President (VP), you will be responsible for leading and executing key components of the MUSO Internal Control Testing program. This role provides the opportunity to develop a deep understanding of material processes, operational risks, and key controls across the firm while overseeing risk-based control testing for high-risk processes. The VP will partner with the ICT team, business stakeholders, corporate functions, and the 2LOD Non-Financial Risk team to ensure testing activities are completed timely, thoroughly documented, and aligned with program expectations. The ICT Team is also responsible for validating controls associated with the firm’s End User Computing (EUC) population to ensure they meet applicable policy requirements. As Business Risk and Control ICT VP, you will help lead the review, validation, documentation, and reporting of EUC control activities to support a strong control environment, effective risk management, and governance oversight.

Requirements

Eligible to work in the U.S.
Bachelor’s degree required
7+ years of experience in Operational Risk, Internal Controls, IT Risk, Third-Party Risk Management, Compliance, or Audit within a bank or financial institution.
Demonstrated experience with control testing, risk assessments, audit readiness, issue remediation, or governance reporting activities.
Strong understanding of internal controls, operational risk management, control design, operating effectiveness, and documentation standards.
Ability to organize, analyze, and interpret data to identify trends, risks, issues, and opportunities for process improvement.
Proficiency in Microsoft Word, Excel, and PowerPoint
Strong written and verbal communication skills, with the ability to prepare executive-ready materials and present information clearly to senior stakeholders.
Effective interpersonal skills with the ability to build relationships, influence stakeholders, and work collaboratively across business lines and control functions.

Nice To Haves

advanced degree or relevant professional certification preferred
experience with GRC tools preferred

Responsibilities

Execute risk-based control testing to assess internal controls and EUCs for design and operating effectiveness.
Oversee documentation of testing results, including evidence collection, issue analysis, and maintenance of audit-ready records.
Lead ICT walkthroughs with business units and corporate functions to understand processes, risks, and key control activities.
Partner with business units, corporate functions, and control owners to identify, assess, and remediate control gaps or deficiencies.
Serve as a key liaison with the 2LOD Non-Financial Risk team to address review comments, challenges, and program expectations.
Provide regular status updates to management, working groups, and governance committees on testing progress, issues, and remediation activity.
Prepare clear, executive-ready reports and presentations for business lines, legal entities, and regional risk committees.
Support the development and reporting of risk metrics, including KPIs and KRIs, for business line and enterprise-level reporting.
Coordinate monthly 1LOD Operational Risk reporting, including data analysis and risk management activities through the GRC tool.
Contribute to process improvement initiatives designed to strengthen the ICT program, enhance consistency, and improve execution efficiency.
Support BRC leadership with ad hoc projects, regulatory initiatives, and governance-related deliverables as needed.