Senior BISO Leader — Enterprise Security & Risk Strategy

CVS Health Corporation; Minnesota; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus eligibility

Equity award program

Career development

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the security program across all CVS Health lines of business. This role partners with senior IT leaders to embed risk-based decision making into business initiatives and governance.

Strong leadership, communication, and strategic thinking are essential. The BISO will drive KPIs, manage enterprise risk, and oversee a team, ensuring cross-functional alignment and execution on security objectives.

Qualifications

• 15+ years of senior leadership experience in security and risk management.
• 10+ years in GRC or enterprise security programs.
• 5+ years as BISO or Head BISO.
• 5+ years collaborating with business leaders to translate risk into business terms.
• Experience with multiple security frameworks (NIST, ISO, HITRUST, HIPAA, PCI).

Responsibilities

• Serve as a trusted advisor to business unit leaders on cybersecurity.
• Define and report KPIs and metrics for executive audiences.
• Drive risk management strategy with security objectives across teams.
• Lead cross-functional initiatives and ensure timely execution.
• Develop communications for internal and external stakeholders.
• Analyze data to support decision-making and continuous improvement.
• Lead, coach and develop the BISO team.

Skills

Strategic leadership

Cybersecurity governance

Risk management

Stakeholder management

Communication

KPI reporting

Executive advisory

Education

Bachelor's degree

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the security program across all CVS Health lines of business. This role partners with senior IT leaders to embed risk-based decision making into business initiatives and governance.

Strong leadership, communication, and strategic thinking are essential. The BISO will drive KPIs, manage enterprise risk, and oversee a team, ensuring cross-functional alignment and execution on security objectives.