Risk & Control Testing & Assessment AVP

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
** Job Overview:
** The AVP will lead efforts to identify, assess, and oversee technology-related risks and controls within the Technology Control Testing team, with a primary focus on evaluating the design and operational effectiveness of controls as part of the RCSA program. This role will drive execution and oversight of control testing activities, ensuring that controls are appropriately designed to mitigate key risks and operate effectively in practice.

Responsibilities may include Quality Assurance (QA) or Portfolio Oversight for a designated entity, maintaining alignment with regulatory expectations and supporting the future state initiatives.
** Responsibilities:
**** Portfolio Oversight (Entity/MUBK)**
* ** Portfolio Management:
** Coordinate and oversee control testing activities across the assigned portfolio. Plan, schedule, and monitor testing performed by designated analysts for all IT controls. Partner with stakeholders to refine control language and maintain test scripts that validate compliance with bank policies, procedures, and regulatory requirements. Participate in control walk-throughs and produce clear, well-structured documentation. Support tracking and reporting of testing progress.
* ** Quality Control (QC):
** Review work papers and evidence prepared by testers for completeness and accuracy. Ensure adherence to RCSA testing methodology and documentation standards. Confirm that all testing results and supporting evidence are accurately recorded in the GRC repository (Open Pages).
* ** Issue Management:
** Identify and document control failures, initiate issue records, and collaborate with control owners on remediation plans.
* ** Stakeholder Communication:
** Act as the primary liaison for IT control owners, providing timely updates on testing progress, preliminary observations, and final results. Escalate issues or delays to management as appropriate to maintain transparency.
* ** Team Development:
** Provide guidance, training, and mentoring to testers on RCSA procedures and best practices to ensure consistency and quality.
* ** Status Reporting:
** Deliver regular updates to the VP and governance forums on testing progress, issues, and trends.
** QA & Governance**
* ** Quality Assurance Oversight:
** Independently review and calibrate testing outcomes across all portfolios to ensure consistency and accuracy in pass/fail determinations.
* ** Governance & Methodology:
** Maintain and update testing methodology and SOPs in alignment with enterprise RCSA standards.
* ** Training & Calibration:
** Lead QA-related training initiatives for testers and AVPs, including workshops and refreshers on updated processes.
* ** Metrics & Reporting:
** Develop and report QA metrics, identify trends, and recommend improvements to leadership.
* ** Support RCSA Redesign Projects:
** Contribute expertise to projects such as RCSA redesign and CRI integration, translating diagnostic statements into test scripts.
*
* Qualifications:

*** At least 5+ years’ experience in risk management, control testing, or related fields, within the financial services industry
* Strong working knowledge of RCSA frameworks, regulatory standards (e.g., COSO, NIST CSF, ISO), GRC tools (e.g. Open Pages), and…