Senior BISO Leader: Enterprise Security & Risk Strategy

CVS Health Corporation; Washington (District of Columbia); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with business objectives across CVS Health lines of business.

The role requires strong leadership, strategic vision, and the ability to translate security risk into business terms for senior executives. It involves governance, KPI reporting, and driving risk-informed decision making across the organization.

Qualifications

• 15+ years of experience in senior leadership with strategy and people leadership.
• 10+ years in either a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO.

Responsibilities

• Serve as a trusted advisor to business unit leadership for cybersecurity practices across the lifecycle.
• Define and report KPIs and metrics to non-technical audiences, including senior leaders.
• Drive risk management strategy with security objectives and cross-team execution.
• Lead or sponsor large-scale cross-functional initiatives with progress tracking.

Skills

Leadership

Communication

Strategic thinking

Stakeholder management

Risk management

Education

Bachelor's degree

Tools

NIST, ISO, HITRUST, HIPAA, PCI

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with business objectives across CVS Health lines of business.

The role requires strong leadership, strategic vision, and the ability to translate security risk into business terms for senior executives. It involves governance, KPI reporting, and driving risk-informed decision making across the organization.