Internal Control Testing

Requirements

• Eligible to work in the U.S.
• Bachelor's degree required; advanced degree or relevant professional certification preferred.
• 7+ years of experience in Operational Risk, Internal Controls, IT Risk, Third-Party Risk Management, Compliance, or Audit within a bank or financial institution.
• Demonstrated experience with control testing, risk assessments, audit readiness, issue remediation, or governance reporting activities.
• Strong understanding of internal controls, operational risk management, control design, operating effectiveness, and documentation standards.
• Ability to organize, analyze, and interpret data to identify trends, risks, issues, and opportunities for process improvement.
• Proficiency in Microsoft Word, Excel, and PowerPoint; experience with GRC tools preferred.
• Strong written and verbal communication skills, with the ability to prepare executive-ready materials and present information clearly to senior stakeholders.
• Effective interpersonal skills with the ability to build relationships, influence stakeholders, and work collaboratively across business lines and control functions.
• The expected base salary ranges from $xxxK - $xxxk. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certi

Additional Information

Business Risk and Control - Internal Control Testing (ICT) Vice President (VP): Business Risk and Control (BRC) is a 1st line of defense Operational Risk team responsible for identifying, assessing, monitoring, and controlling operational risk for all businesses and legal entities across Mizuho U.S. Operations (MUSO). The Business Risk and Control team collaborates with the various business/entities and related support functions to manage operational risk and conducts reporting at the business line/entity level. Business Risk and Control is responsible for managing and implementing the MUSO Internal Control Testing (ICT) program, which assesses key controls across the firm for both design and operating effectiveness. Internal controls serve as a component of the first line of defense in mitigating risks, maintaining the integrity of financial and accounting information, promoting accountability, and preventing fraud. As such, they are an integral component of MUSO's day-to-day execution of its business operations. To align with industry's best practices and ensure the firm maintains a robust control environment, MUSO has developed a first line, risk based Internal Controls Testing (ICT) Program. As Business Risk and Control ICT Vice President (VP), you will be responsible for leading and executing key components of the MUSO Internal Control Testing program. This role provides the opportunity to develop a deep understanding of material processes, operational risks, and key controls across the firm while overseeing risk-based control testing for high-risk processes. The VP will partner with the ICT team, business stakeholders, corporate functions, and the 2LOD Non-Financial Risk team to ensure testing activities are completed timely, thoroughly documented, and aligned with program expectations. The ICT Team is also responsible for validating controls associated with the firm's End User Computing (EUC) population to ensure they meet applicable policy requirements. As Business Risk and Control ICT VP, you will help lead the review, validation, documentation, and reporting of EUC control activities to support a strong control environment, effective risk management, and governance oversight. Duties and responsibilities: Execute risk-based control testing to assess internal controls and EUCs for design and operating effectiveness. Oversee documentation of testing results, including evidence collection, issue analysis, and maintenance of audit-ready records. Lead ICT walkthroughs with business units and corporate functions to understand processes, risks, and key control activities. Partner with business units, corporate functions, and control owners to identify, assess, and remediate control gaps or deficiencies. Serve as a key liaison with the 2LOD Non-Financial Risk team to address review comments, challenges, and program expectations. Provide regular status updates to management, working groups, and governance committees on testing progress, issues, and remediation activity. Prepare clear, executive-ready reports and presentations for business lines, legal entities, and regional risk committees. Support the development and reporting of risk metrics, including KPIs and KRIs, for business line and enterprise-level reporting. Coordinate monthly 1LOD Operational Risk reporting, including data analysis and risk management activities through the GRC tool. Contribute to process improvement initiatives designed to strengthen the ICT program, enhance consistency, and improve execution efficiency. Support BRC leadership with ad hoc projects, regulatory initiatives, and governance-related deliverables as needed.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at mizuho? Share your experience