Belvedere Risk Management

Justin Butler, Chief Risk Officer

Risk as A Driver of Better Decisions and Growth

Justin Butler

Justin Butler is a risk and governance leader with over two decades of experience across financial services and nonprofits. Former Chief Risk Officer of a USD 17 billion institution, he now delivers keynotes and programs that help leaders turn risk into clarity, strategy and better decision-making.

For more than two decades, my career has centered on helping organizations make better decisions in the face of uncertainty. I began in internal audit and progressed through enterprise risk, compliance, corporate strategy, product management and transformation leadership across leading financial institutions, including Bank of America, GE Capital (later Synchrony Financial), Wells Fargo, and ultimately as Chief Risk Officer of Bremer Bank, a USD 17 billion financial institution.

Those experiences shaped one enduring belief: organizations rarely struggle because they fail to identify risk. More often, they struggle because they do not consistently make high-quality decisions as conditions change.

Risk management is therefore not about eliminating uncertainty. It is about creating the governance, transparency and confidence that enable leaders to pursue the right opportunities responsibly.

Turning Enterprise Risk into a Strategic Capability

One of the most meaningful chapters of my career involved modernizing an enterprise risk framework during a period of significant organizational and industry change. The objective was never simply to improve reporting. It was to improve the quality of executive decision-making.

We redesigned how risk information was collected, analyzed and communicated so executive leadership and the board could make faster, more informed decisions. Risk evolved from a backward-looking reporting exercise into a forward-looking strategic capability.

This work proved particularly valuable during the collapse of Silicon Valley Bank and a rapidly rising interest-rate environment. Strong governance did not eliminate uncertainty, but it gave leadership greater confidence in evaluating strategic options and positioned the organization well for acquisition readiness.

Perhaps the greatest success was cultural. Risk stopped being viewed as a separate compliance exercise and became part of how strategic decisions were made across the organization.

Governance, Risk Appetite and What Strong Cultures Get Right

Strong governance begins with strategy. Organizations must understand what they are trying to achieve, identify what could prevent success and establish a risk appetite aligned with long-term objectives.

“ Risk becomes most powerful when it improves the quality of executive decision-making. “

Effective boards revisit risk appetite as business conditions evolve rather than treating it as an annual governance exercise. Equally important is maintaining clear accountability between the board, management, independent risk functions and internal audit.

As organizations expand into AI, cyber resilience, operational resilience and third-party ecosystems, these are no longer isolated risks. They are interconnected business decisions requiring enterprise-wide governance.

Technology changes rapidly. Decision quality compounds.

What Modern Risk Leadership Requires

Growth—whether organic or through acquisition—requires clarity of purpose. Strategy, governance, reliable information and disciplined execution must reinforce one another.

One of the most underestimated risks in mergers and acquisitions is integration. Systems, culture, customer experience and operating models must ultimately function as one enterprise. Bringing governance into the process early improves outcomes.

At the same time, leaders should recognize that more reporting does not necessarily produce better decisions. Executive teams need clarity, context and actionable insight rather than additional pages of reporting.

Applying Enterprise Governance beyond the Corporation

Today, through Belvedere Risk Management, I apply many of the same governance principles used to protect enterprise value to families, business owners and family offices. While the risks differ—cybersecurity, insurance, reputation, travel security and wealth preservation—the underlying discipline remains remarkably consistent: identify what matters most, understand potential consequences and make informed decisions before events become crises.

The environment changes. Sound governance principles do not.

What Really Matters in Leadership

If there is one lesson I would offer emerging leaders, it is to distinguish what is urgent from what is important. That distinction shapes better decisions and ultimately stronger organizations.

Looking back, I also wish I had invested even more time building relationships with peers across industries. Some of the most valuable insights come from candid conversations with leaders facing similar challenges.

The organizations that outperform over the next decade will not necessarily have access to the best technology or the largest budgets. They will be the organizations that consistently make better decisions than their competitors.

That is why I believe governance is becoming one of the defining competitive advantages in business. At its best, enterprise risk management is not about avoiding uncertainty—it is about giving leaders the confidence, discipline and insight to navigate it successfully.