Executive Director, Enterprise Security & BISO Leader

Careerwebsite; Northern (KY); Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across the enterprise. You will translate risk into business terms and communicate with senior leaders to drive governance and safe decision-making.

You will steer cross-functional initiatives, report KPIs, and nurture a high-performance security organization, ensuring alignment with regulatory requirements and business goals.

Qualifications

• 15+ years of senior leadership experience defining security strategy, governance, and cross-functional alignment.
• 10+ years in GRC or enterprise security program leadership.
• 5+ years as BISO or Head BISO.
• 5+ years coordinating with multiple frameworks (NIST/ISO/HITRUST/HIPAA/PCI).
• 5+ years leading programs and cross-functional initiatives.
• 5+ years translating cybersecurity risk into business terms for executives.

Responsibilities

• Act as trusted advisor to business-unit leadership with accountability for security governance.
• Define and report KPIs and metrics to senior leadership in accessible terms.
• Drive risk management strategy with prioritization across teams.
• Lead large cross-functional initiatives with timely execution.
• Develop executive communications and memos for internal/external stakeholders.
• Provide data-driven insights to support decision-making and improvements.
• Coach and develop BISO team members and foster accountability.

Skills

Strategic leadership

Stakeholder management

Executive communication

Risk management

Executive reporting

Education

Bachelor's degree

Tools

NIST

ISO

HITRUST

HIPAA

PCI

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across the enterprise. You will translate risk into business terms and communicate with senior leaders to drive governance and safe decision-making.

You will steer cross-functional initiatives, report KPIs, and nurture a high-performance security organization, ensuring alignment with regulatory requirements and business goals.