Senior Director, Enterprise Information Security & BISO

CVS Health Corporation; Nevada (IA); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the security program across CVS Health lines of business. You will mentor the BISO team and translate risk into business terms for senior leadership, embedding security into strategic initiatives.

The role requires 15+ years of leadership in security, 5+ years as BISO, and strong experience with NIST/ISO/HITRUST/HIPAA/PCI.

Qualifications

• 15+ years of senior leadership and strategic security experience.
• 10+ years working in GRC or enterprise security programs.
• 5+ years as BISO or Head BISO.
• 5+ years aligning security controls with regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years of program and project management.

Responsibilities

• Advise business units and align cybersecurity with lifecycle initiatives.
• Define KPIs and report to senior leaders in accessible terms.
• Lead risk management strategy and cross‑functional execution.
• Spearhead major cross‑functional security projects and governance reviews.
• Develop executive communications and governance materials.

Skills

Strategic leadership

Stakeholder management

GRC experience

BISO experience

Program & project management

Business partner with leadership

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the security program across CVS Health lines of business. You will mentor the BISO team and translate risk into business terms for senior leadership, embedding security into strategic initiatives.

The role requires 15+ years of leadership in security, 5+ years as BISO, and strong experience with NIST/ISO/HITRUST/HIPAA/PCI.