Executive BISO Leader - Enterprise Security & Risk

CVS Health Corporation; Wyoming (OH); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement savings options

Paid time off

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program. You will work with senior IT leaders to embed security strategy, govern risk, and enable business initiatives across CVS Health lines of business.

The role requires 15+ years in senior leadership, 10+ years in GRC or security programs, and 5+ years as a BISO. You will guide cross-functional teams and report to executive leadership in a fast-paced

Qualifications

• 15+ years of experience in senior leadership roles with strategy, people leadership, and stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO.
• 5+ years with two or more security control frameworks and regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program and Project Management leading cross-functional initiatives.
• 5+ years partnering with business units to translate cybersecurity risk into business terms.

Responsibilities

• Serve as trusted advisor to business unit leadership and align cybersecurity with initiatives across the lifecycle.
• Define and report KPIs and metrics to non-technical teams and senior leaders.
• Drive risk management strategy and prioritize execution across teams.
• Lead cross-functional initiatives and sponsor large-scale projects.
• Develop and disseminate clear communications for internal and external stakeholders.
• Analyze data and present insights to support decision-making and continuous improvement.
• Lead, coach, and develop BISO team members with clear objectives.
• (Additional governance and leadership activities)

Skills

Leadership

Security governance

Stakeholder management

Program management

Communication

Risk management

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program. You will work with senior IT leaders to embed security strategy, govern risk, and enable business initiatives across CVS Health lines of business.

The role requires 15+ years in senior leadership, 10+ years in GRC or security programs, and 5+ years as a BISO. You will guide cross-functional teams and report to executive leadership in a fast-paced