Executive BISO: Enterprise Cybersecurity Leader

CVS Health Corporation; Town of Vermont (WI); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus potential

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and drive security governance across all CVS Health lines of business. This senior role shapes strategy, risk management, and executive communications to embed security into business decisions.

The ideal candidate has 15+ years in senior leadership, 10+ years in GRC or enterprise security, and 5+ years as a BISO, with hands-on experience across multiple security frameworks and

Qualifications

• 15+ years in senior leadership with strategy, people leadership, and stakeholder management.
• 10+ years in a GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.
• 5+ years with two or more security control frameworks and alignment to regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program and Project Management with cross-functional initiative delivery.
• 5+ years partnering with business units to translate cybersecurity risk into business terms.

Responsibilities

• Serve as trusted advisor to business unit leadership and align cybersecurity with lifecycle initiatives.
• Define and report KPIs and metrics for non-technical audiences, including senior leaders.
• Drive risk management strategy and ownership for security objectives across teams.
• Lead cross-functional programs and initiatives with timely execution and governance.
• Develop clear communication materials for internal and external stakeholders at senior levels.
• Collect and analyze data to support decisions and drive continuous improvement.
• Lead governance forums, set agendas, and ensure decisions are actioned.
• Stay updated on laws and standards and translate impact for IT leadership.
• Motivate business units to adopt controls and educate on policy changes.
• Develop and coach BISO team members to high performance.

Skills

Strategic leadership

Stakeholder management

Executive communication

Cybersecurity governance

Risk management

Program management

Business acumen

Education

Bachelor's degree

Job description

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and drive security governance across all CVS Health lines of business. This senior role shapes strategy, risk management, and executive communications to embed security into business decisions.

The ideal candidate has 15+ years in senior leadership, 10+ years in GRC or enterprise security, and 5+ years as a BISO, with hands-on experience across multiple security frameworks and