[Hiring] Associate Vice President of Platform Security @CVS Health

Role Description

CVS Health is seeking a polished and experienced security leader to serve as Associate Vice President of Platform Security, responsible for defining and executing the enterprise strategy for securing cloud, container, and AI platforms across CVS Health's technology estate. This role owns the technical security standards, architecture, controls, and operating model that enable secure, scalable adoption of cloud-native infrastructure, containerized workloads, and enterprise AI and GenAI capabilities. The AVP will lead a high-performing team of platform security engineers, architects, and domain leaders across Cloud Security, Container Security, and AI Security, while partnering deeply with technology, infrastructure, application, IAM, Cyber Defense, Data Protection, Legal, Compliance, and business leadership. This leader will balance risk reduction, engineering velocity, and enterprise adoption, ensuring security is embedded into platform design, deployment, runtime governance, and ongoing operations.

Qualifications

• 12+ years of progressive experience in information security, cybersecurity engineering, cloud security, infrastructure security, platform security, or related technology leadership roles.
• 5+ years of senior leadership experience building, leading, and scaling cross-functional security engineering teams in large, complex enterprise environments.
• Deep technical expertise in cloud security architecture and operations across major cloud platforms, including cloud posture management, identity and access controls, network segmentation, encryption, logging, vulnerability management, and policy enforcement.
• Strong understanding of container and Kubernetes security, including image scanning, workload protection, runtime controls, secrets management, cluster hardening, CI/CD integration, and vulnerability remediation.
• Demonstrated experience defining technical security standards, reference architectures, control frameworks, and engineering guardrails for enterprise-scale platforms.
• Experience with AI, GenAI, or emerging technology security programs, including AI governance, AI platform security, model risk, agentic systems, prompt/response guardrails, model scanning, AI threat modeling, or AI runtime monitoring.
• Strong knowledge of security posture management, vulnerability management, threat modeling, risk-based prioritization, and executive-level risk reporting.
• Proven ability to influence engineering culture, platform governance, security control adoption, and strategic investment decisions across multiple leadership levels.
• Experience operating in highly regulated environments and applying security requirements aligned to healthcare, privacy, financial, or critical infrastructure obligations.
• Excellent communication and presentation skills; ability to translate complex cloud, container, infrastructure, and AI security risks into clear decisions and executive narratives.

Requirements

• Advanced degree in Computer Science, Information Security, Cybersecurity, Engineering, AI/ML, or a related field.
• Certifications such as CISSP, CISM, CCSP, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, Kubernetes Security Specialist, or equivalent.
• Experience establishing or scaling an AI Security function, AI governance control model, AI gateway strategy, model security program, agentic security capability, or AI red teaming function.
• Familiarity with ISO/IEC 42001, NIST AI RMF, MITRE ATLAS, OWASP Top 10 for LLM Applications, OWASP Agentic guidance, NIST CSF, and cloud security best-practice frameworks.
• Experience with CNAPP, CSPM, CWPP, container security, API gateway, model gateway, AI guardrail, SSPM/AISPM, and security data platform technologies.
• Experience in healthcare, pharmacy, insurance, financial services, or another highly regulated industry.
• Demonstrated success partnering with cloud providers, AI platform providers, enterprise architecture, procurement, third-party risk, privacy, legal, compliance, and business technology leaders.

Benefits

• Comprehensive and competitive mix of pay and benefits.
• Medical, dental, and vision coverage.
• Paid time off.
• Retirement savings options.
• Wellness programs and other resources, based on eligibility.

Pay Range

The typical pay range for this role is: $185,400.00 - $375,950.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program.