AVP, Platform Security

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Summary: CVS Health is seeking a polished and experienced security leader to serve as Associate Vice President of Platform Security, responsible for defining and executing the enterprise strategy for securing cloud, container, and AI platforms across CVS Health's technology estate. This role owns the technical security standards, architecture, controls, and operating model that enable secure, scalable adoption of cloud-native infrastructure, containerized workloads, and enterprise AI and GenAI capabilities. The AVP will lead a high-performing team of platform security engineers, architects, and domain leaders across Cloud Security, Container Security, and AI Security, while partnering deeply with technology, infrastructure, application, IAM, Cyber Defense, Data Protection, Legal, Compliance, and business leadership. This leader will balance risk reduction, engineering velocity, and enterprise adoption, ensuring security is embedded into platform design, deployment, runtime governance, and ongoing operations.

Strategic Leadership • Define and own the enterprise platform security strategy, roadmap, and policy framework for cloud, container, and AI security, aligned with CVS Health's business objectives, technology strategy, and regulatory obligations. • Establish a unified technical standards and architecture approach across cloud, container, and AI platforms, ensuring security controls are built into platform design and operational execution. • Stand up and mature the AI Security operating model as a first-class enterprise capability supporting safe AI and GenAI adoption across the enterprise. • Serve as a subject matter expert and trusted advisor to senior technology, security, and business executives on emerging platform security risks, cloud-native attack trends, AI threats, and industry best practices. • Drive continuous improvement across the platform security program through risk-based prioritization, measurable KPIs, executive reporting, benchmarking, and innovation. Cloud, Container & Platform Security Engineering • Cloud Security Services: Own the strategy, architecture, and operational standards for securing enterprise cloud environments, including cloud posture management, policy-as-code, identity and access guardrails, vulnerability exposure reduction, and automated remediation workflows. • Container Security: Define and govern container and Kubernetes security across cloud and on-premises container platforms, including image scanning, workload protection, runtime controls, configuration standards, vulnerability management, and platform coverage objectives. • Automation & Enforcement: Promote preventive guardrails, policy enforcement, infrastructure-as-code controls, and self-service remediation patterns that reduce risk while preserving engineering velocity. • Technology Stack Ownership: Influence the platform security tooling portfolio, including CSPM, CNAPP, container security, posture management, AI security, and related integrations. Manage vendor strategy, platform health, roadmap alignment, and capability adoption in partnership with procurement and peer technology leaders. AI Security Strategy, Architecture & Controls • AI Security Operating Model: Establish and scale a dedicated AI Security function with clear accountability, sustained governance, and defined responsibilities across AI governance, platform security, model security, agentic security, incident readiness, and risk reporting. • AI Security