Diane Doering
Cumberland Center,ME
Summary
Accomplished Enterprise Risk Management leader with a track record in strengthening corporate risk governance and developing Business Continuity Management strategies. Skilled in conducting comprehensive risk assessments and collaborating cross-functionally to elevate organization resilience.
Overview
24
24
years of professional experience
5
5
Certifications
Work History
Head Global Enterprise Risk Management
Takeda Pharmaceuticals
Cambridge, MA
05.2023 - Current
- Matured enterprise risk management (ERM) program framework by strengthening corporate risk governance, leveraging tools to identify, monitor, and report key risks, and aligning program elements with board and regulatory expectations to enhance organizational resilience.
- Conduct comprehensive annual risk assessment, proposing risk priorities to executive team & drafting final Board report to be presented by Chief Executive Officer and Chief Ethics & Compliance Officer
- Introduce risk prioritization framework to evaluate risks based on risk level, strength of mitigation strategies, and overall risk exposure
- Partnered with global security team to enhance global business resilience policy, establishing cross-functional approach for global ERM, business continuity (BCM), and crisis management (CM), strengthening global BCM program through introduction of tools and participation in executive-level tabletop exercises.
- Elevate risk capabilities and foster risk mindset & collaboration by building a global risk community, bringing together non-risk professionals to learn from & share risk insights, escalating early signals as relevant
- Collaborated with controls and assurance functions to develop centralized reporting dashboard that identifies early signals and trends, managing remediation progress and effectiveness to improve risk oversight.
Vice President, Enterprise Risk Management
Iron Mountain
Boston, MA
08.2018 - 05.2023
- Reporting to Chief Risk Officer, strengthen global ERM program in alignment with the COSO risk management framework and ISO 31000 standards by implementing holistic framework to articulate risk appetite, align key risk policies & implement enhanced risk assessment activities & reporting
- Managed internal and Board risk governance; presented ERM topics to quarterly Risk Committee, enhancing Board's understanding of risk landscape
- Develop tools, including annual risk assessments, risk register, and key risk indicators (KRIs) to assist in identification, mitigation & management of key risks
- Provide risk leadership to align ERM and Information Security (IS) risk management to successfully address financial services (FFIEC) regulatory findings
- Lead Governance, Risk & Compliance (GRC) team of fifteen responsible for developing company-wide security policies & standards in alignment with key security frameworks (e.g., NIST CSF, ISO 27001)
- Conducted annual control risk assessments and reported key security risk metrics, informing strategic risk management decisions
- Developed security training and awareness initiatives to proactively address evolving security risks, fostering a culture of security awareness
Manager of Risk & Compliance
Dead River Company
Portland, Maine
05.2017 - 07.2018
- Conducted annual enterprise risk assessments to identify vulnerabilities in private company operations
- Strengthened risk processes to ensure compliance with environmental regulations and enhance employee safety policies
- Incorporated industry-required regulations (i.e., OSHA, DOT, EPA, state environmental protection agencies) into internal risk processes and audits to mitigate compliance risks
- Build and conduct internal site audit program
Head of Operational Risk Management
Abu Dhabi Investment Authority
Abu Dhabi, United Arab Emirates
09.2011 - 09.2016
- Recruited by and reporting to CRO (previous manager at Bank of America) to establish all aspects of operational risk framework, including development of organization-wide policy framework, process analysis and key metrics
- As Executive Team member, led development of Risk Policy Guiding Principles (aka risk appetite) covering all aspects of risk
- Recommended holistic Operational Risk framework to include governance, policy, monitoring, escalation & roles/responsibilities
- Reported to Emirate leadership committees to gain approval for implementing new organizational Business Continuity Management program.
Vice President Operational Risk Management
State Street Global Advisors (SSgA)
Boston, Massachusetts
05.2008 - 08.2011
- Recruited by and reporting to Chief Risk Officer (previous manager at Putnam Investments) to implement ERM operational risk framework within investment management business
- Improved quality of loss data capture by driving design and implementation of automated error escalation and approval process utilizing third-party software, further strengthening regulatory use case requirements for risk management
- Led enhanced risk governance process through the Trade Management Oversight and Operational Risk committees
Senior Vice President, Operational Risk Management
Bank of America / Columbia Management
Boston, Massachusetts
05.2007 - 04.2008
- Implement ERM operational risk framework within asset management business
- Conduct quarterly business risk assessment and loss data reporting
- Improve client review process to comply with regulatory agreement
- Negotiate development of new Operating Committee to evaluate and enhance controls for trading over-the-counter (OTC) derivative instruments
- Acknowledged for improving the process of gathering and monitoring counterparty credit information during the financial crisis.
Senior Vice President, Operational Risk Management
Putnam Investments
Boston, Massachusetts
09.2001 - 05.2007
- Achieved an industry award from Institutional Investor for "Best Post Trade Technology Implementation" in 2007 for a derivative trade matching system.
- Led weekly cross-functional meetings to confirm operational readiness for new funding activities
- Utilized operational risk tools to streamline complex processes
- Conducted assessment of proposed international regulatory changes (MiFID, UCITSIII) to identify compliance implications
- Conducted internal process reviews; assessed financial controls as prescribed by Sarbanes Oxley (Sec 404)
- Acted as liaison with corporate audit; led internal audit of Risk Management function
Education
Bachelor of Arts - Political Science & Philosophy, Cum Laude
University of Vermont
Burlington, Vermont, VT05.1986
Skills
- Enterprise risk management
- Risk management frameworks
- Risk assessment
- Crisis management
- Business continuity planning
- Regulatory compliance
- Governance frameworks
Certification
Disaster Recovery Institute International (DRII) - Certified Business Continuity Professional (CBCP) 2013
Affiliations
Founding Chair, DRI Foundation Women in Business Continuity Planning (WBCM) 2017-2022
Timeline
Head Global Enterprise Risk Management
Takeda Pharmaceuticals
05.2023 - Current
Vice President, Enterprise Risk Management
Iron Mountain
08.2018 - 05.2023
Manager of Risk & Compliance
Dead River Company
05.2017 - 07.2018
Head of Operational Risk Management
Abu Dhabi Investment Authority
09.2011 - 09.2016
Vice President Operational Risk Management
State Street Global Advisors (SSgA)
05.2008 - 08.2011
Senior Vice President, Operational Risk Management
Bank of America / Columbia Management
05.2007 - 04.2008
Senior Vice President, Operational Risk Management
Putnam Investments
09.2001 - 05.2007
Bachelor of Arts - Political Science & Philosophy, Cum Laude
University of Vermont