Senior Director, Enterprise Information Security & Risk

CVS Health Corporation; Delaware; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

Paid time off

Retirement options

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with CVS Health’s diverse lines of business. The role demands strategic leadership, strong communication, and ability to influence at the senior level to enable secure business growth.

The candidate will drive governance, risk management, and KPI reporting across the enterprise, partnering with IT leaders and business SMEs to embed security into all

Qualifications

• 15+ years of leadership experience in senior roles with strategy, people leadership, and stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as BISO or Head BISO.
• 5+ years with two+ security frameworks and regulations (NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years in Program/Project Management leading cross-functional initiatives.

Responsibilities

• Act as trusted advisor to business unit leadership and align cybersecurity with business initiatives.
• Define and report KPIs and metrics for senior leadership.
• Drive risk management strategy and prioritize execution across teams.
• Lead cross-functional initiatives with strong sponsorship and governance.
• Develop communications for internal and external stakeholders and provide data-driven insights.
• Coach and develop BISO team members and foster accountability.

Skills

Leadership

Strategy & Planning

Communication

Security Governance

BISO experience

Risk Management

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with CVS Health’s diverse lines of business. The role demands strategic leadership, strong communication, and ability to influence at the senior level to enable secure business growth.

The candidate will drive governance, risk management, and KPI reporting across the enterprise, partnering with IT leaders and business SMEs to embed security into all