Senior BISO & Enterprise Security Strategy Lead

CVS Health Corporation; United States; Remote; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus program

Equity award program

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program across all CVS Health lines of business. You will partner with senior IT and business leaders to embed risk-informed security decisions, balance strategy with operational delivery, and drive governance at scale.

The role requires 15+ years of leadership experience, deep knowledge of risk management frameworks, and a track record translating

Qualifications

• 15+ years of leadership experience in large-scale security programs.
• Proven ability to translate cybersecurity risk into business terms for senior leadership.
• Experience with governance, metrics, and KPI reporting for enterprise programs.
• Strong communication and collaboration with cross-functional teams leading to risk-informed decisions.
• Knowledge of multiple security control frameworks (e.g., NIST, ISO, HITRUST, HIPAA, PCI) and related regulations.
• Program and project management experience with cross-functional initiatives.

Responsibilities

• Serve as trusted advisor to business unit leadership for cybersecurity initiatives.
• Define and report KPIs and metrics in business-friendly terms for senior leaders.
• Drive risk management strategy and cross-team execution of security objectives.
• Lead cross-functional projects with timely execution and governance reviews.
• Create clear communication materials for stakeholders and leadership.
• Analyze data to support decision-making and continuous improvement in BISO.
• Organize governance meetings, set agendas, and document decisions.

Skills

Leadership

Stakeholder management

Communication

Strategic planning

Risk management

Business acumen

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead a world-class cybersecurity program across all CVS Health lines of business. You will partner with senior IT and business leaders to embed risk-informed security decisions, balance strategy with operational delivery, and drive governance at scale.

The role requires 15+ years of leadership experience, deep knowledge of risk management frameworks, and a track record translating