Executive BISO: Enterprise Security Strategy Lead

CVS Health Corporation

South Dakota

Hybrid

USD 175,000 - 335,000

Full time

7 days ago

Be an early applicant

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business. You will embed security strategy in business initiatives, translate risk into business terms, and report to senior leadership.

The role demands senior leadership, governance experience, and the ability to drive change at scale while partnering with IT and business SME teams.

Qualifications

15+ years of senior leadership experience with strategy and stakeholder management.
10+ years in a GRC or technical security program at enterprise scale.
5+ years as a BISO or Head BISO.
5+ years with two or more security control frameworks and regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
5+ years in Program and Project Management leading cross-functional initiatives.
5+ years translating cybersecurity risk into business terms.

Responsibilities

Advise business units on cybersecurity controls and governance across the lifecycle.
Define KPIs and report metrics to senior leaders in accessible terms.
Drive risk management strategy and prioritization across teams.
Lead cross-functional projects with executive sponsorship and governance.
Develop clear communications for internal and external stakeholders.
Analyze data to support decisions and drive continuous improvement.
Lead, coach, and develop the BISO team.