Senior BISO & Enterprise Cybersecurity Leader

CVS Health Corporation; Illinois; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world‑class enterprise cybersecurity program across CVS Health lines of business. You will translate risk into business terms, guide governance, and drive strategic security initiatives with senior IT and business leaders.

The role demands deep leadership, strong communication, and the ability to influence change at scale.

Qualifications

• 15+ years of experience in senior-level leadership roles with responsibility for strategy, people leadership, and complex stakeholder management.
• 10+ years working in either a GRC or a technical security program at enterprise scale
• 5+ years of direct experience as a BISO or Head BISO.
• 5+ years of direct experience with two or more security control frameworks and alignment to key regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years of experience in Program and Project Management with cross-functional initiatives.
• 5+ years of experience partnering with business unit leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as a trusted advisor with business unit leadership and act as a liaison to ensure cybersecurity practices are built into business unit initiatives for the entire lifecycle.
• Define and report KPIs and metrics aligning with business initiatives and deliver them to non-technical teams for senior leadership reporting.
• Drive risk management strategy by designing business unit security objectives and prioritizing execution across teams.
• Lead or support large cross-functional projects with sponsorship and governance.
• Develop and disseminate clear communications for internal and external stakeholders aimed at senior leadership.
• Gather, analyze, and present data to support decision-making and drive continuous improvement across BISO.
• Address complex issues with enterprise-wide impact and enable secure business outcomes.
• Organize meetings and governance reviews with documented action items and follow-ups.
• Stay updated on laws and standards and assess their impact on the business.
• Negotiate to remove obstacles hindering security controls enterprise-wide.
• Motivate business units to adopt cybersecurity controls and educate stakeholders on policy changes.
• Lead, coach, and develop BISO team members with clear objectives.

Skills

Leadership

Strategy

Stakeholder management

GRC

Security program management

Cross-functional collaboration

KPI reporting

Executive communication

Budget/financial acumen

BISO experience

Education

Bachelor's degree

Tools

NIST

ISO

HITRUST

HIPAA

PCI

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world‑class enterprise cybersecurity program across CVS Health lines of business. You will translate risk into business terms, guide governance, and drive strategic security initiatives with senior IT and business leaders.

The role demands deep leadership, strong communication, and the ability to influence change at scale.