Risk & Control Testing & Assessment AVP

AVP Technology Control Testing

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Overview

The AVP will lead efforts to identify, assess, and oversee technology-related risks and controls within the Technology Control Testing team, with a primary focus on evaluating the design and operational effectiveness of controls as part of the RCSA program. This role will drive execution and oversight of control testing activities, ensuring that controls are appropriately designed to mitigate key risks and operate effectively in practice. Responsibilities may include Quality Assurance (QA) or Portfolio Oversight for a designated entity, maintaining alignment with regulatory expectations and supporting the future state initiatives.

Responsibilities

Portfolio Oversight (Entity / MUBK)

Portfolio Management : Coordinate and oversee control testing activities across the assigned portfolio. Plan, schedule, and monitor testing performed by designated analysts for all IT controls. Partner with stakeholders to refine control language and maintain test scripts that validate compliance with bank policies, procedures, and regulatory requirements. Participate in control walk-throughs and produce clear, well-structured documentation. Support tracking and reporting of testing progress.

Quality Control (QC) : Review work papers and evidence prepared by testers for completeness and accuracy. Ensure adherence to RCSA testing methodology and documentation standards. Confirm that all testing results and supporting evidence are accurately recorded in the GRC repository (OpenPages).

Issue Management : Identify and document control failures, initiate issue records, and collaborate with control owners on remediation plans.

Stakeholder Communication : Act as the primary liaison for IT control owners, providing timely updates on testing progress, preliminary observations, and final results. Escalate issues or delays to management as appropriate to maintain transparency.

Team Development : Provide guidance, training, and mentoring to testers on RCSA procedures and best practices to ensure consistency and quality.

Status Reporting : Deliver regular updates to the VP and governance forums on testing progress, issues, and trends.

QA & Governance

Quality Assurance Oversight : Independently review and calibrate testing outcomes across all portfolios to ensure consistency and accuracy in pass / fail determinations.

Governance & Methodology : Maintain and update testing methodology and SOPs in alignment with enterprise RCSA standards.

Training & Calibration : Lead QA-related training initiatives for testers and AVPs, including workshops and refreshers on updated processes.

Metrics & Reporting : Develop and report QA metrics, identify trends, and recommend improvements to leadership.

Support RCSA Redesign Projects : Contribute expertise to projects such as RCSA redesign and CRI integration, translating diagnostic statements into test scripts.

Qualifications

At least 5+ years' experience in risk management, control testing, or related fields, within the financial services industry

Strong working knowledge of RCSA frameworks, regulatory standards (e.g., COSO, NIST CSF, ISO), GRC tools (e.g. OpenPages), and supporting integrated tools (e.g. Power BI, SharePoint).

Experience in working with multiple IT risk and control domains such as identity and access management, vulnerability management, SDLC, change / release / incident management and technology operations within large enterprise environments.

Hands-on experience performing or leading RCSA activities including ability to identify controls gaps, risk identification, control design, and control effectiveness testing.

Demonstrated leadership, stakeholder management, and written and verbal communication skills including ability to articulate complex control issues clearly.

Strong organizational and time management skills, ability to manage multiple priorities and mentor junior staff providing quality assurance, guidance, and knowledge sharing.

Strong decision-making skills and confidence in exercising sound judgement when assessing control effectiveness. Meet deadlines for control testing and documentation and proactively escalate.

Analytical mindset with high degree of attention to detail, meticulous documentation habits and commitment to continuous improvement.

Maintain high standards of evidence and reporting to support audit and regulatory requirements.

Leverage automation and analytics tools (e.g., OpenPages enhancements, RNG dashboards) to improve efficiency and visibility.

Strengthen feedback loops between QA and execution teams to drive corrective actions and best practices.

Education

Bachelor's degree in computer science, information systems, technology, or equivalent work experience preferred.

Other Qualifications

As per MUFG's work policy for all personnel, candidates must work onsite for 4 days and 1 day remotely out of either Jersey City, NJ or Tempe, AZ office.

The typical base pay range for this role is between $93K - $116K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and / or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays.