Senior BISO & Enterprise Security Strategy Director

CVS Health Corporation; Utah; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical, dental and vision benefits

Paid time off

Retirement savings options

Wellness program

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program across all lines of business. This senior role requires strategic vision, executive communication, and the ability to translate risk into business terms for leadership audiences.

The role emphasizes governance, KPI reporting, and cross-functional collaboration with IT, risk, and business SMEs.

Qualifications

• 15+ years of senior leadership experience with strategy, people leadership, and stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO.
• 5+ years with two+ security frameworks and alignment to regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program and Project Management leading cross-functional initiatives.
• 5+ years partnering with business unit leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as trusted advisor to business unit leadership on cybersecurity practices.
• Define and report KPIs and metrics to non-technical audiences.
• Drive risk management strategy across teams and secure prioritization.
• Lead cross-functional initiatives with leadership governance and execution.
• Develop exec-ready communications for internal and external stakeholders.
• Gather, analyze, and present data to support decision-making and continuous improvement.
• Lead, coach, and develop the BISO team.

Skills

Leadership

Governance

Risk management

BISO experience

Regulatory compliance

Program management

Education

Bachelor's degree

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program across all lines of business. This senior role requires strategic vision, executive communication, and the ability to translate risk into business terms for leadership audiences.

The role emphasizes governance, KPI reporting, and cross-functional collaboration with IT, risk, and business SMEs.