DIANA LASSO

Provide strategic leadership for enterprise-wide risk strategy, transformation, and governance initiatives within Global Risk Management. Partner with senior executives and cross-functional stakeholders to translate enterprise priorities into actionable execution plans, strengthen risk oversight, and modernize processes through technology, automation, and data-driven decision-making.

• Lead enterprise-wide risk strategy and transformation initiatives, translating organizational priorities into actionable strategic roadmaps that strengthen governance, improve risk oversight, and align enterprise execution with business objectives and regulatory expectations.
• Advise senior executives, risk committees, and the Board on enterprise risk exposures, strategic priorities, and mitigation approaches, delivering executive-level insights and recommendations that influence risk-informed decisions and organizational direction.
• Drive the integration of artificial intelligence, automation, and advanced analytics into risk management processes, advancing operational modernization, improving reporting capabilities, and strengthening enterprise-wide risk visibility and decision support.
• Direct cross-functional transformation and change management initiatives, coordinating stakeholder engagement, executive communications, implementation planning, and organizational readiness to ensure effective execution and sustainable adoption of enterprise priorities.
• Strengthen risk governance, accountability, and performance oversight through proactive risk identification, mitigation planning, executive reporting, and strategic monitoring; recognized with Scotiabank's prestigious 2025 Best of the Best Award for Top Performance.

Led operational non-financial risk oversight for strategic enterprise change initiatives, supporting complex banking transformations, regulatory alignment, and governance effectiveness across banking jurisdictions.

• Led operational risk oversight for BMO's Bank of the West acquisition, evaluating enterprise risk exposures, governance considerations, and operational implications associated with a major cross-border banking transformation.
• Directed risk assessment activities within the Initiatives Assessment and Approval Process (IAAP), ensuring strategic initiatives incorporated appropriate risk considerations, governance requirements, and enterprise approval standards.
• Strengthened enterprise risk governance across strategic change initiatives by evaluating operational non-financial risk exposures, identifying control considerations, and reinforcing alignment with regulatory requirements and established risk management frameworks.
• Influenced risk-informed strategic decisions by providing insights into operational exposures, regulatory considerations, and potential mitigation measures associated with complex organizational transformation initiatives.
• Coordinated with cross-functional business and risk stakeholders to support enterprise execution, risk identification, assessment, monitoring, and oversight, promoting consistency between strategic transformation objectives and institutional risk management standards.

Led the development and oversight of enterprise risk management strategies, governance frameworks, and critical risk programs. Provided strategic advisory support to senior leadership, risk committees, and the Board while strengthening organizational risk culture, regulatory alignment, and enterprise-wide risk accountability.

• Designed and implemented enterprise-wide Risk Culture and Risk and Control Self-Assessment (RCSA) programs, establishing structured processes for risk identification, control evaluation, accountability, and consistent risk governance across organizational functions.
• Advised senior executives, risk committees, and the Board on enterprise risk appetite, organizational exposures, emerging threats, and mitigation strategies, translating complex risk assessments into actionable recommendations supporting strategic decision-making.
• Directed oversight of key enterprise risk management programs, including Internal Capital Adequacy Assessment Process (ICAAP), operational risk, business continuity, insurance, third-party risk management, and emerging risk initiatives.
• Conducted independent risk and control effectiveness assessments, identifying governance gaps, evaluating control deficiencies, and recommending corrective actions to strengthen regulatory compliance, operational resilience, and enterprise risk mitigation.
• Strengthened enterprise risk reporting, oversight, and organizational accountability through coordinated risk monitoring and governance initiatives; received the 2019 GPC Award for Best Practices in Enterprise Risk Management.

Directed governance, risk management, and regulatory compliance initiatives across financial institutions, providing strategic oversight of operational, credit, financial, and strategic risk. Advised institutional leadership on enterprise risk frameworks, regulatory obligations, internal controls, and risk appetite alignment.

• Directed enterprise risk management strategy and governance framework initiatives across financial institutions, integrating operational, credit, financial, and strategic risk considerations into organizational decision-making and oversight structures.
• Led risk-based audits and comprehensive internal control assessments, evaluating control effectiveness, identifying enterprise risk exposures, and developing recommendations to strengthen operational performance, governance, and regulatory compliance.
• Advised senior executives and institutional leadership on enterprise risk exposures, control deficiencies, and mitigation strategies, providing strategic recommendations that supported informed decisions and improved risk management practices.
• Evaluated emerging financial services risks, regulatory developments, and industry trends, translating complex findings into actionable strategies to strengthen regulatory preparedness, compliance oversight, and organizational resilience.
• Strengthened alignment between institutional risk management frameworks and organizational risk appetite, promoting consistent risk assessment, mitigation planning, governance accountability, and compliance across financial services operations.