Executive Director, BISO - Enterprise Cyber Risk & Strategy

CVS Health Corporation; Kentucky; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus program

Equity award program

Job summary

CVS Health is seeking an Executive Director - BISO to lead the enterprise cybersecurity program across CVS Health lines of business. This role requires strategic leadership, risk-based decision-making, and strong collaboration with senior IT leaders to embed security into business initiatives.

You will govern risk, measure outcomes with KPIs, guide cross-functional programs, and mentor the BISO team to scale security across the organization.

Qualifications

• 15+ years in senior leadership with strategy and stakeholder management.
• 10+ years in enterprise-scale GRC or security programs.
• 5+ years as BISO or Head BISO.
• 5+ years with multiple security control frameworks (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in program/project management with cross-functional initiatives.

Responsibilities

• Serve as trusted advisor to business unit leaders and align cybersecurity with lifecycle initiatives.
• Define and report KPIs and metrics in business terms for senior leaders.
• Drive risk management strategy and prioritize cross-team execution.
• Lead or sponsor large cross-functional projects with timely delivery.
• Develop clear communications for internal and external stakeholders.
• Gather and analyze data to inform decisions and drive improvements across BISO.
• Organize governance forums, set agendas, document actions, and ensure follow-through.
• Stay updated on new laws and standards and assess business impact.
• Negotiate to remove obstacles hindering security controls enterprise-wide.
• Mentor BISO team and foster accountability and continuous improvement.

Skills

Strategic leadership

Cybersecurity governance

Risk management

Executive communication

Cross-functional collaboration

KPIs and metrics reporting

Education

Bachelor's degree

Job description

CVS Health is seeking an Executive Director - BISO to lead the enterprise cybersecurity program across CVS Health lines of business. This role requires strategic leadership, risk-based decision-making, and strong collaboration with senior IT leaders to embed security into business initiatives.

You will govern risk, measure outcomes with KPIs, guide cross-functional programs, and mentor the BISO team to scale security across the organization.