Senior BISO Executive Director – Cyber Strategy

CVS Health Corporation; Oregon; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across CVS Health lines of business. You will guide enterprise cybersecurity governance, risk management, and executive communications while partnering with senior IT leaders and SMEs.

The role requires strong leadership, strategic vision, financial acumen, and ability to influence at scale across the organization.

Qualifications

• 15+ years of experience in senior leadership roles with strategy and stakeholder management.
• 10+ years in a GRC or enterprise security program
• 5+ years as BISO or Head BISO
• 5+ years in multiple security frameworks and regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI)
• 5+ years in program/project management leading cross-functional initiatives
• 5+ years partnering with business units to translate cybersecurity risk into business terms

Responsibilities

• Serve as trusted advisor to business unit leadership and align cybersecurity with lifecycle initiatives.
• Define and report KPIs and metrics in business terms for senior leaders.
• Drive risk management by designing security objectives and prioritizing execution across teams.
• Lead or support cross-functional initiatives with timely delivery and governance.
• Develop communications for internal and external stakeholders; tailor for senior audiences.
• Gather and analyze data to support decisions and drive continuous improvement across BISO.

Skills

Leadership

Strategic thinking

Stakeholder management

Risk management

Communication

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and embed security strategy across CVS Health lines of business. You will guide enterprise cybersecurity governance, risk management, and executive communications while partnering with senior IT leaders and SMEs.

The role requires strong leadership, strategic vision, financial acumen, and ability to influence at scale across the organization.