Senior BISO Leader - Enterprise Cybersecurity Strategy

CVS Health Corporation; Hawaii; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business. You will partner with senior IT and business leaders to embed security strategy, risk-based decision making, and governance into large-scale initiatives.

The role requires 15+ years in senior security leadership, strong communication and financial acumen, and a proven track record in managing cross-functional

Qualifications

• 15+ years of senior leadership in security program management.
• 10+ years in GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.
• 5+ years with two or more security control frameworks (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in program and project management.
• 5+ years partnering with business leaders to translate cybersecurity risk into business terms.

Responsibilities

• Advise senior business leaders on embedding cybersecurity into initiatives.
• Define KPIs and report to senior stakeholders.
• Drive risk management strategy and security objectives.
• Lead cross-functional projects and governance reviews.
• Deliver executive-level communications and risk insights.
• Coach and develop BISO team.
• Stay current on laws and regulations affecting cybersecurity.
• Negotiate to reduce complexity of security controls.

Skills

Strategic leadership

Cybersecurity governance

Risk management

Stakeholder management

Executive communication

Program management

Cross-functional leadership

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across CVS Health lines of business. You will partner with senior IT and business leaders to embed security strategy, risk-based decision making, and governance into large-scale initiatives.

The role requires 15+ years in senior security leadership, strong communication and financial acumen, and a proven track record in managing cross-functional