Executive Director, Enterprise Security & BISO Leader

CVS Health Corporation; West Virginia; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health Corporation in the United States seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and drive governance for the enterprise cybersecurity program. This senior role partners with senior IT leaders to embed security strategy into business decisions.

The role emphasizes translating risk into business terms, KPI reporting, cross-functional leadership, and continuous improvement across the organization.

Qualifications

• 15+ years in senior leadership with strategy and stakeholder management.
• 10+ years in a GRC or enterprise security program.
• 5+ years as BISO or Head BISO.
• 5+ years with two or more security frameworks and regulations (e.g., NIST, ISO, HIPAA, PCI).
• 5+ years in program and project management and cross-functional initiatives.
• 5+ years translating cybersecurity risk into business terms.

Responsibilities

• Serve as trusted advisor to business unit leadership on cybersecurity.
• Define KPIs and report metrics to senior leadership in accessible terms.
• Lead risk management strategy and cross-functional initiatives.
• Develop communications for internal and external stakeholders.
• Gather and present data to drive decision-making and improvements.
• Lead, coach, and develop BISO team members.

Skills

Strategic leadership

Cybersecurity governance

Stakeholder management

Risk assessment

KPI reporting

Communication

Education

Bachelor's degree

Job description

CVS Health Corporation in the United States seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and drive governance for the enterprise cybersecurity program. This senior role partners with senior IT leaders to embed security strategy into business decisions.

The role emphasizes translating risk into business terms, KPI reporting, cross-functional leadership, and continuous improvement across the organization.