Chief of Staff (COS) to the Deputy Chief Information Security Officer (Deputy CISO)

Job description

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Chief of Staff to the Deputy Chief Information Security Officer (Deputy CISO) is a leadership role responsible for driving execution, alignment, and operational discipline across the cybersecurity organization. Reporting to the Deputy CISO and working closely with the Chief Information Security Officer (CISO), this leader serves as a strategic partner and force multiplier for cybersecurity priorities, ensuring that key programs, budget commitments, strategic initiatives, and executive deliverables are coordinated, measurable, and delivered with impact. This role requires a seasoned, proactive, and highly organized professional who can operate across executive, business, technology, finance, and security teams. The Chief of Staff will help advance the Deputy CISO program by managing critical planning rhythms, supporting cybersecurity strategy, strengthening program governance, coordinating budget and resource planning, and enabling clear communication between the Deputy CISO, CISO, and enterprise stakeholders. Key Responsibilities: Strategic Execution & Program Management: Partner closely with the Deputy CISO to translate cybersecurity strategy into actionable priorities, coordinated plans, and measurable outcomes across the security organization. Lead cross-functional cyber program governance, ensuring major initiatives, milestones, dependencies, risks, and executive decisions are tracked and driven to completion. Monitor progress against strategic cybersecurity goals, identify roadblocks, escalate issues appropriately, and proactively recommend solutions to the Deputy CISO and CISO. Prepare executive-level updates, decision materials, and performance narratives for the Deputy CISO, CISO, and senior leadership forums. Develop and manage recurring cybersecurity status reports, executive briefings, leadership readouts, and program updates that clearly communicate progress, risks, decisions, and required actions. Create clear, concise, and audience-appropriate communications for the Deputy CISO and CISO, including talking points, leadership messages, presentation narratives, and enterprise-facing updates. Establish and maintain the Deputy CISO operating cadence, including leadership meetings, governance forums, business reviews, strategic planning sessions, and executive reporting routines. Drive alignment across cybersecurity programs to ensure priorities, funding, resourcing, sequencing, and delivery plans support enterprise security strategy and risk reduction objectives. Collaborate closely with cybersecurity leaders across security operations, governance, risk, compliance, engineering, architecture, identity, threat management, resilience, and related functions to align priorities, resolve dependencies, and advance enterprise cyber objectives. Operational Excellence & Efficiency: Streamline and optimize operational processes, communication flows, and decision-making frameworks within the security organization. Manage and prioritize critical communications, presentations, and deliverables for the Deputy CISO. Maintain an integrated communications calendar for key cybersecurity deliverables, leadership forums, enterprise updates, board materials, audit responses, and stakeholder engagement milestones. Support cybersecurity budget planning, resource prioritization, financial governance, and investment tracking to ensure alignment with strategic objectives and enterprise financial commitments. Partner with finance, procurement, and security leaders to support forecasting, budget reviews, investment cases, vendor spend visibility, and resource allocation decisions. Develop and maintain mechanisms for tracking cybersecurity program health, including key risks, dependencies, issues, decisions, performance indicators, and executive action items. Facilitate and prepare for key meetings, including developing agendas, preparing materials, capturing minutes, and ensuring follow-up on action items. Executive & Stakeholder Engagement: Act as a trusted advisor and central coordination point for the Deputy CISO, while maintaining strong partnership with the CISO and senior cybersecurity leadership team. Foster strong working relationships with cyber leaders to promote transparency, coordination, accountability, and consistent execution across the cybersecurity leadership team. Effectively communicate and collaborate with senior leaders across CVS Health, including the executive suite, legal, HR, finance, and other business units. Serve as a communication bridge between the Deputy CISO, CISO, cybersecurity leadership, business partners, and enabling functions to ensure timely information flow, message consistency, and coordinated follow-up. Build and maintain strong relationships with internal and external stakeholders to foster collaboration and drive consensus. Represent the Deputy CISO in selected forums, planning discussions, and stakeholder engagements as needed, ensuring decisions, actions, and follow-through remain aligned with CISO and Deputy CISO priorities. Attend, lead, and facilitate meetings on behalf of the Deputy CISO as appropriate, representing Deputy CISO priorities, guiding discussion, capturing key decisions, and ensuring timely follow-up on actions and commitments. Coordinate sensitive, time-critical, or high-visibility cybersecurity matters on behalf of the Deputy CISO, ensuring appropriate stakeholder engagement, escalation, and follow-through. Analysis & Insights: Conduct research and analysis on industry trends, competitiv