Chief BISO & Security Strategy Executive

CVS Health Corporation; North Carolina; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement options

Wellness programs

Equity awards

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across all lines of business. The role requires strategic leadership, governance, and strong collaboration with senior IT leaders to embed risk-aware decisions into business initiatives.

The ideal candidate brings extensive experience in security governance, risk management, and cross-functional leadership, with the ability to communicate complex

Qualifications

• 15+ years of experience in senior-level leadership roles with responsibility for strategy and stakeholder management.
• 10+ years working in a GRC or technical security program at enterprise scale.
• 5+ years of direct experience as a BISO or Head BISO.
• 5+ years of direct experience with two or more security frameworks and alignment to key regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years of experience in Program and Project Management with cross-functional initiatives.
• 5+ years partnering with business unit leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as a trusted advisor with business unit leadership and liaison to ensure cybersecurity practices are embedded in initiatives.
• Define and report KPIs and metrics in terms accessible to non-technical audiences.
• Drive risk management strategy with security objectives and cross-team prioritization.
• Lead cross-functional projects and report progress against KPIs.
• Develop clear executive communications and materials for internal and external stakeholders.
• Gather data to support decision-making and drive continuous improvement across the BISO function.

Skills

Leadership

Stakeholder management

Strategic planning

Security governance

Communication

Risk management

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across all lines of business. The role requires strategic leadership, governance, and strong collaboration with senior IT leaders to embed risk-aware decisions into business initiatives.

The ideal candidate brings extensive experience in security governance, risk management, and cross-functional leadership, with the ability to communicate complex