Senior BISO & Enterprise Security Strategy Lead

CVS Health Corporation; Alaska; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health Corporation is looking for an Executive Director - Business Information Security Officer (BISO) to guide the enterprise cybersecurity program across all CVS Health lines of business. You will lead the BISO team, translate risk into business terms, and partner with senior IT and business leaders to embed security into strategic initiatives.

This role demands deep leadership, strategic thinking, and strong communication, with accountability for governance, metrics, and risk-informed

Qualifications

• 15+ years in senior security leadership roles with strategy and stakeholder management.
• 10+ years in a GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.
• 5+ years with multiple security frameworks and regulations (NIST/ISO/HIPAA/PCI).
• 5+ years in program and project management for cross-functional initiatives.
• 5+ years translating cybersecurity risk into business terms.

Responsibilities

• Advise business units and align cybersecurity with initiatives throughout lifecycles.
• Define and report KPIs to non-technical teams with senior-level reporting.
• Drive risk management by setting objectives and prioritizing execution.
• Lead large cross-functional initiatives and track progress via KPIs.
• Create clear communications for internal and external stakeholders.
• Analyze data to support decisions and drive continuous improvement.
• Address complex enterprise-wide security challenges with leadership.
• Organize governance forums and ensure action items are followed.
• Stay updated on laws and standards and advise IT leadership accordingly.
• Negotiate to remove obstacles to security controls across the organization.
• Motivate units to adopt controls and educate on policy changes.
• Coach and develop BISO team members with clear objectives.

Skills

Strategic leadership

Stakeholder mgmt

GRC programs

BISO experience

Project management

Security governance

Data-driven decisions

Executive communication

Education

Bachelor's degree or equivalent

Job description

CVS Health Corporation is looking for an Executive Director - Business Information Security Officer (BISO) to guide the enterprise cybersecurity program across all CVS Health lines of business. You will lead the BISO team, translate risk into business terms, and partner with senior IT and business leaders to embed security into strategic initiatives.

This role demands deep leadership, strategic thinking, and strong communication, with accountability for governance, metrics, and risk-informed