Executive BISO Leader: Enterprise Security Strategy

CVS Health Corporation; Rhode Island; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business, serving as a trusted security advisor to senior leaders.

This role defines strategy, governance, and KPIs; translates cybersecurity risk into business terms; drives cross-functional initiatives; and ensures secure, compliant operations at scale.

Qualifications

• 15+ years of senior leadership experience.
• 10+ years in GRC or technical security at enterprise scale.
• 5+ years as BISO or Head BISO.
• 5+ years aligning security controls to regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program and Project Management with cross-functional initiatives.
• 5+ years translating cybersecurity risk into business terms.

Responsibilities

• Advise business units and align cybersecurity with lifecycle initiatives.
• Define and report KPIs to non-technical stakeholders.
• Lead risk management objectives and drive execution.
• Oversee cross-functional projects and governance reviews.
• Develop communications for senior leaders and stakeholders.
• Present data-driven insights to inform decisions.
• Coach and develop BISO team members.

Skills

Strategic leadership

Stakeholder management

Cybersecurity governance

Risk management

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business, serving as a trusted security advisor to senior leaders.

This role defines strategy, governance, and KPIs; translates cybersecurity risk into business terms; drives cross-functional initiatives; and ensures secure, compliant operations at scale.