Executive BISO Leader: Enterprise Security Strategy

CVS Health Corporation; South Carolina; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO function and partner with senior IT and business leaders across CVS Health lines of business. This role combines strategic guidance with hands-on governance to embed security into business initiatives and drive risk-informed decision-making.

The ideal candidate has 15+ years in leadership, 10+ years in enterprise security or GRC, and 5+ years as a BISO, with deep knowledge of

Qualifications

• 15+ years in senior leadership roles with strategy and stakeholder management.
• 10+ years in a GRC or enterprise security program
• 5+ years as a BISO or Head BISO
• 5+ years with two or more security frameworks (e.g., NIST, ISO, HITRUST, HIPAA, PCI)
• 5+ years in program and project management leading cross-functional initiatives
• 5+ years translating cybersecurity risk into business terms

Responsibilities

• Advise business units on cybersecurity alignment and governance across the lifecycle.
• Develop KPIs and present executive-level metrics for strategic decisions.
• Lead risk management strategy and drive cross-team execution.
• Spearhead large-scale, cross-functional projects with clear sponsorship and outcomes.
• Create concise communications for internal and external stakeholders at senior levels.
• Analyze data to identify trends and drive continuous improvement across BISO.
• Address complex enterprise-wide issues and enable risk-informed decisions.
• Lead governance meetings and executive reviews with documented actions.
• Monitor regulatory changes and advise IT leadership on impact.
• Motivate units to adopt security controls and explain policy changes.

Skills

Leadership

Strategy

Communication

Risk management

Program management

Stakeholder management

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO function and partner with senior IT and business leaders across CVS Health lines of business. This role combines strategic guidance with hands-on governance to embed security into business initiatives and drive risk-informed decision-making.

The ideal candidate has 15+ years in leadership, 10+ years in enterprise security or GRC, and 5+ years as a BISO, with deep knowledge of