Strategic BISO Leader for Enterprise Cybersecurity

CVS Health Corporation; Colorado; Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Annual bonus

Equity awards

Comprehensive benefits

Retirement plan

Job summary

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO organization and align cybersecurity with CVS Health's business units across all lines of business.

You will provide senior-level guidance, embed security strategy into business decisions, and influence risk-informed priorities at scale. The role requires strong communication with executives, strategic planning, and proven leadership in enterprise security programs.

Qualifications

• 15+ years of experience in senior leadership with strategy and stakeholder management.
• 10+ years in a GRC or enterprise security program.
• 5+ years as a BISO or Head BISO.

Responsibilities

• Serve as trusted advisor to business unit leadership and align cybersecurity with initiatives.
• Define and report KPIs and metrics to senior leaders in accessible terms.
• Drive risk management strategy and accountable execution across teams.
• Lead cross-functional, large-scale initiatives and governance forums.
• Develop executive communication materials for internal and external stakeholders.
• Analyze data to support decisions and drive continuous improvement.
• Coach and develop BISO team members and foster accountability.

Skills

Senior leadership

Strategic planning

Risk management

Cross-functional leadership

Executive communication

Education

Bachelor’s degree

Tools

Governance frameworks

Security metrics

Job description

CVS Health is seeking an Executive Director - Business Information Security Officer (BISO) to lead the BISO organization and align cybersecurity with CVS Health's business units across all lines of business.

You will provide senior-level guidance, embed security strategy into business decisions, and influence risk-informed priorities at scale. The role requires strong communication with executives, strategic planning, and proven leadership in enterprise security programs.