Senior BISO Leader: Enterprise Cyber Risk & Strategy

CVS Health Corporation; Town of Florida (NY); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across lines of business. You will serve as a trusted security advisor to senior IT and business leaders, shaping governance, risk management, and strategy at scale.

The role requires 15+ years in security leadership, 5+ years as a BISO, and hands-on experience with multiple control frameworks.

Qualifications

• 15+ years of senior-level security leadership experience.
• 10+ years in a GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.
• 5+ years with multiple security control frameworks and regulatory alignments.
• 5+ years in program and project management leading cross-functional initiatives.
• 5+ years translating cybersecurity risk into business terms.

Responsibilities

• Act as trusted advisor to business unit leadership and align cybersecurity with initiatives.
• Define and report KPIs to executive stakeholders in accessible terms.
• Drive risk management strategy and cross-functional execution.
• Lead large-scale cross-functional projects with governance oversight.
• Develop communications for senior leadership and stakeholders.
• Analyze data to inform decisions and drive continuous improvement.
• Coach and develop BISO team with clear objectives and accountability.
• Stay informed on laws, regulations, and standards affecting the business.

Skills

Executive leadership

Security strategy

Governance

Risk management

Stakeholder management

Communication to senior leaders

Program management

Cross-functional leadership

Security controls

Leadership coaching

Education

Bachelor's degree

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across lines of business. You will serve as a trusted security advisor to senior IT and business leaders, shaping governance, risk management, and strategy at scale.

The role requires 15+ years in security leadership, 5+ years as a BISO, and hands-on experience with multiple control frameworks.