Strategic BISO Leader — Enterprise Security & Risk

CVS Health Corporation; Louisiana (MO); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Benefits package

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across all lines of business. The role combines strategic vision with hands-on governance, translating risk into business terms and partnering with senior IT and business leaders.

You will build KPIs, drive risk management, oversee cross-functional initiatives, and mentor the BISO team while aligning security with regulatory requirements.

Qualifications

• 15+ years in senior leadership with strategy, people leadership and stakeholder management.
• 10+ years in a GRC or technical security program at enterprise scale.
• 5+ years as a BISO or Head BISO with cross-functional impact.

Responsibilities

• Serve as a trusted advisor to business unit leadership and align cybersecurity with lifecycle initiatives.
• Define and report KPIs and metrics to senior leadership in accessible terms.
• Drive risk management strategy and ownership for prioritization and execution.
• Lead cross-functional initiatives and oversee governance and operating reviews.
• Develop clear communications for internal and external stakeholders.
• Gather data, identify trends, and drive continuous improvement across BISO.
• Organize meetings, set agendas, and ensure action items and decisions are tracked.
• Stay informed on laws and standards, assessing impact on the business.

Skills

Strategic leadership

Executive communication

GRC program management

Stakeholder management

Security risk management

Education

Bachelor's degree

Tools

Security frameworks

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the enterprise cybersecurity program across all lines of business. The role combines strategic vision with hands-on governance, translating risk into business terms and partnering with senior IT and business leaders.

You will build KPIs, drive risk management, oversee cross-functional initiatives, and mentor the BISO team while aligning security with regulatory requirements.