Senior BISO & Enterprise Security Strategy Lead

CVS Health Corporation; Tennessee; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across CVS Health lines of business. You will translate cybersecurity risk into business terms and guide risk-informed decision making for a world-class enterprise cybersecurity program.

The role requires deep risk management expertise, experience with multiple control frameworks, and a track record of guiding large cross-functional initiatives.

Qualifications

• 15+ years in senior leadership with strategy, people leadership and stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO.
• 5+ years with two or more security control frameworks and alignment to regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years leading cross-functional programs and projects.
• 5+ years partnering with business unit leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as a trusted advisor to business unit leadership and align cybersecurity with initiatives across the lifecycle.
• Define and report KPIs and metrics in terms understandable to non-technical audiences, including executives.
• Drive risk management by designing security objectives and coordinating across teams.
• Lead or sponsor large-scale cross-functional initiatives with timely execution.
• Create clear communications for internal/external stakeholders at senior levels.
• Gather and analyze data to inform decisions and identify trends for improvement.
• Organize governance meetings and ensure action items and decisions are documented.

Skills

Strategic leadership

GRC experience

BISO experience

Security frameworks

Program management

Business risk translation

Education

Bachelor's degree

Job description

CVS Health Corporation seeks an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across CVS Health lines of business. You will translate cybersecurity risk into business terms and guide risk-informed decision making for a world-class enterprise cybersecurity program.

The role requires deep risk management expertise, experience with multiple control frameworks, and a track record of guiding large cross-functional initiatives.