Senior BISO Leader: Enterprise Security & Risk Strategy

CVS Health Corporation; Missouri; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits

Equity award program

Bonus/short-term incentive

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program and embed risk-based security into business initiatives. You will partner with senior IT and business leaders, translate risk into business terms, and drive strategic governance across lines of business.

The role requires extensive leadership experience, deep knowledge of security frameworks, and the ability to steer large-scale, cross-functional

Qualifications

• 15+ years in senior leadership roles with strategy, people leadership, and stakeholder management.
• 10+ years in a GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.
• 5+ years with two or more security control frameworks tied to regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program and Project Management leading cross-functional initiatives.
• 5+ years partnering with business leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as trusted advisor to business unit leadership on cybersecurity practices across the lifecycle.
• Define and report KPIs and metrics in business-friendly terms for senior leadership.
• Drive risk management objectives and prioritize across teams.
• Lead cross-functional initiatives with timely execution and governance.
• Develop and disseminate communications for internal and external stakeholders at senior levels.
• Analyze data to support decision making and drive continuous improvement in the BISO function.
• Lead meetings and governance reviews with clear action items and follow-ups.
• Stay current on laws and standards and assess impact to the business.

Skills

Leadership

GRC experience

BISO experience

Regulatory frameworks

Program/Project management

Business partnering

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program and embed risk-based security into business initiatives. You will partner with senior IT and business leaders, translate risk into business terms, and drive strategic governance across lines of business.

The role requires extensive leadership experience, deep knowledge of security frameworks, and the ability to steer large-scale, cross-functional