Senior Security Executive - BISO Leader

CVS Health Corporation; Pennsylvania; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with business strategy across CVS Health lines of business in the United States.

The role demands senior leadership, governance, and the ability to translate risk into business terms, driving cross-functional programs and executive communication.

Qualifications

• 15+ years of experience in senior security leadership roles.
• 10+ years in GRC or a technical security program at enterprise scale.
• 5+ years of direct experience as a BISO or Head BISO.
• 5+ years with two or more security control frameworks and alignment to key regulations (e.g., NIST, ISO, HITRUST, HIPAA, PCI).
• 5+ years of experience in Program and Project Management leading cross-functional initiatives.
• 5+ years partnering with business unit leaders to translate cybersecurity risk into business terms.

Responsibilities

• Serve as a trusted advisor to ensure cybersecurity practices are embedded in business unit initiatives throughout the lifecycle.
• Define and report KPIs and metrics for senior leadership with insights in accessible terms.
• Drive risk management strategy by designing security objectives across teams and prioritizing execution.
• Lead cross-functional initiatives with governance, sponsorship, and timely progress tracking.
• Develop clear communications for internal and external stakeholders at senior levels.
• Gather, analyze, and present data to support decision-making and drive improvements.
• Organize governance meetings, set agendas, and ensure action items are followed through.
• Stay abreast of laws, regulations, and standards and assess their business impact.

Job description

CVS Health Corporation is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO team and align cybersecurity with business strategy across CVS Health lines of business in the United States.

The role demands senior leadership, governance, and the ability to translate risk into business terms, driving cross-functional programs and executive communication.