IT Auditor

Mizuho•New York, NY

1d•Hybrid

About The Position

The Internal Audit Department Americas (IADA) provides internal audit services to Mizuho Americas LLC (“Mizuho”), its U.S. subsidiaries and operations. IADA performs audits of different business areas of Mizuho U.S. Operations (MUSO) to evaluate the effectiveness of risk management and governance processes. The Internal Audit Division (IAD) overseas arm, IADA, reports to the Group Audit Coverage Summary and is seeking an IT auditor with strong experience in auditing IT general, system and application controls, and understanding, analyzing, and assessing technological infrastructure and security controls. The role involves covering assigned areas through relationship management and continuous monitoring, managing the audit process from initiation to completion, and assisting the Group Manager with administrative control of the Group. The technology auditor will supervise or perform internal audits, special audit work, and other special projects. This may include supervising or executing any or all phases of assigned audits (Planning, Fieldwork, Reporting, and Follow-up) in compliance with professional standards and IAD/IADA policies. The focus will be on IT general, system infrastructure, operating system, and application controls for managing risk to Mizuho’s business operations. The role requires ensuring the proper administration of each assignment regarding staff assignment and work completion within deadlines. As an In-Charge Auditor, the individual will supervise and evaluate the performance of assigned audit staff, providing feedback to staff members and the Group Manager. The role involves assisting the Group Manager in maintaining ongoing communication between IADA and technology management, staying current on business and risk profiles, and communicating with other IADA staff, Mizuho areas, external auditors, and regulatory examiners. The position also includes assisting the Group Manager with risk assessments, off-site monitoring, and preparing status reports. Cooperation with supervisory authorities and external auditors is expected, as is representing IADA on committees and working groups. Full cooperation with directives from IADA’s Quality Assurance Support and promotion of its effectiveness are also required. Other assignments or projects as directed by the Group Manager will be performed.

Requirements

Bachelor’s Degree or equivalent.
At least seven years of relevant work experience in internal or external IT auditing, supervisory examinations, or their equivalent.
Demonstrate knowledge and experience in performing IT audits of the technology infrastructure, operating system platforms, and the Network including data security and storage, system security, identity access management, information and cyber security management, system development, and technology governance.
Demonstrate a sound understanding of the financial services industry (i.e., banking, brokerage), technology and regulatory requirements.
Demonstrate sufficient knowledge and understanding of internal audit principles, practices and techniques, and the concepts of risk, risk management, internal control and compliance to: (a) execute complex audit assignments and (b) independently identify potential audit matters with understanding of their risk significance.
Have good audit project (time and task) management skills to successfully manage assigned projects from beginning to end.
Can analyze problems and interpret, understand and follow instructions without excessive dependence on the Group Manager, and supervise/execute and document work performed in accordance with prescribed standards.
Have good communication (written and oral) and interpersonal skills to allow the timely and effective execution of assignments.
Can initiate and organize effective meetings and discussions with auditees and their management.
Ensure the timely and correct preparation of related working papers and develop and document related audit findings and recommendations.

Nice To Haves

May also hold an advanced or specialized degree and/or a professional designation (e.g., CISA, CISSP, CISM, CIA, CAMS) or license relevant to the profession.
Experience with audit and security frameworks such as COSO, COBIT, NIST, FFIEC etc. is considered a plus.

Responsibilities

Supervise or perform selected internal audits, special audit work and other special projects.
Supervise or execute any or all phases (Planning, Fieldwork, Reporting and Follow-up) of assigned audits and other projects.
Focus on IT general, system infrastructure, operating system and application controls for managing risk to Mizuho’s business operations.
Ensure the proper administration of each assignment with respect to staff assignment and completion of work in accordance with date and time requirements.
Supervise and evaluate the performance of assigned audit staff and provide feedback to staff members and the Group Manager.
Assist the Group Manager in maintaining ongoing communication between IADA and technology management responsible for the areas audited by the Group and remain current on the business and risk profiles of these areas.
Maintain communication with other IADA staff, other Mizuho areas and functions, external auditors and regulatory examiners, as needed.
Assist the Group Manager with risk assessments, and off-site monitoring of the Group’s portfolio of audits in the preparation of required status, MIS or other reports.
Cooperate, as needed, with supervisory authorities and external auditors.
Represent IADA on Committees, sub-Committees, Special Project Teams, Working Groups or Meeting Groups, as directed.
Cooperate fully with directives and requests from IADA’s Quality Assurance Support and promote the ongoing effectiveness of IADA’s Quality Assurance function.
Perform other assignments or projects as may be directed by the Group Manager.