Senior BISO & Enterprise Security Leader

CVS Health Corporation; Maryland; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits package

Equity incentive program

Job summary

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business. The role requires senior leadership, strategic guidance, and the ability to translate risk into business terms for executive audiences.

The BISO will mentor the team, drive governance, and ensure security controls align with business objectives, laws, and standards.

Qualifications

• 15+ years of experience in senior-level leadership roles with responsibility for strategy, people leadership, and complex stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale
• 5+ years as a BISO or Head BISO
• 5+ years with two or more security control frameworks and alignment to key regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI)
• 5+ years in Program and Project Management leading cross-functional initiatives
• 5+ years partnering with business unit leaders to translate cybersecurity risk into business terms and drive risk-informed decisions

Responsibilities

• Serve as a trusted advisor to senior business unit leadership on cybersecurity practices.
• Define and report KPIs and metrics for senior leadership.
• Lead risk management strategy and prioritize cross-team execution.
• Sponsoring large-scale cross-functional initiatives and tracking progress.
• Develop presentations and memos for internal/external stakeholders.
• Analyze data to support decision-making and drive improvements.
• Address complex issues with enterprise-wide impact.
• Lead governance meetings and executive reviews.
• Monitor regulatory changes and advise IT leadership.
• Motivate business units to adopt cybersecurity controls.

Education

Bachelor's degree

Job description

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business. The role requires senior leadership, strategic guidance, and the ability to translate risk into business terms for executive audiences.

The BISO will mentor the team, drive governance, and ensure security controls align with business objectives, laws, and standards.