Executive Director, Enterprise BISO & Security Strategy

CVS Health Corporation; Nebraska; On-site; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across the enterprise. You will partner with senior IT and business leaders to translate cybersecurity risk into business terms and drive risk-informed decisions.

The role requires strong leadership, strategic vision, and the ability to influence at scale, with focus on governance, risk management, and cross-functional collaboration across CVS

Qualifications

• 15+ years of senior-level leadership experience with strategy, people leadership, and complex stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO.
• 5+ years aligning security controls with regulations (NIST, ISO, HITRUST, HIPAA, PCI).

Responsibilities

• Serve as a trusted advisor to business unit leadership and align cybersecurity with lifecycle initiatives.
• Define and report KPIs and metrics for senior leaders in accessible terms.
• Drive risk management by designing security objectives and prioritizing execution across teams.
• Lead cross-functional initiatives with senior sponsorship and timely delivery.
• Create clear communications for internal and external stakeholders, tailored to executives.
• Analyze data to support decisions, identify trends, and drive continuous improvement.
• Lead meetings and governance reviews, documenting decisions and actions.
• Stay informed on laws and standards and advise IT leadership on impact.

Skills

Leadership

Strategy

Risk management

Stakeholder management

BISO

GRC

Project Management

Communication

Data analysis

Security frameworks

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across the enterprise. You will partner with senior IT and business leaders to translate cybersecurity risk into business terms and drive risk-informed decisions.

The role requires strong leadership, strategic vision, and the ability to influence at scale, with focus on governance, risk management, and cross-functional collaboration across CVS