Corcept Therapeutics logo
Biotechnology, Pharmaceuticals

Associate Director, Cybersecurity

Redwood City, CAHybridFull TimeDirector$185,000–$240,000 /yrPosted 4 days agoVisa sponsorship available

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

  • cybersecurity program
  • security operations
  • technology platforms
  • security initiatives
  • security risks
  • operational issues
  • managed security service provider
  • SOC/XSIAM
  • endpoint and email security
  • vulnerability management

Nice to have

  • Life Sciences
  • biotechnology
  • pharmaceutical
  • regulated environments

Role summary

Corcept is seeking an Associate Director of Cybersecurity to lead the daily execution and continuous improvement of its cybersecurity program. Reporting to the Director of IT, this hybrid role involves overseeing cybersecurity services, security operations, technology platforms, and initiatives. The Associate Director will manage the cybersecurity MSP, drive security initiatives, and ensure risks are identified and addressed. Key responsibilities include incident response leadership, managing security technologies (Okta, CrowdStrike, Palo Alto, AWS, Microsoft), and overseeing vulnerability and risk management. The role requires a hands-on leader with strong technical and management skills, experience in cybersecurity leadership, and managing MSPs. Preferred qualifications include knowledge of NIST CSF, CIS Controls, and experience in regulated environments like Life Sciences.

For more than 25 years, Corcept has been singularly focused on the science of cortisol, a powerful hormone that when unregulated, can play a role in a broad range of diseases.

Our commercial portfolio includes treatments for hypercortisolism and oncology, and the company has discovered more than 1,000 proprietary selective cortisol modulators and glucocorticoid receptor antagonists. With advanced clinical trials in patients with hypercortisolism, solid tumors, ALS and liver disease, Corcept is unlocking the power of cortisol modulation to help address some of the most devastating diseases patients face today.

Corcept is headquartered in Redwood City, California. To learn more, visit www.corcept.com.

The Associate Director of Cybersecurity will lead the day-to-day execution and continuous improvement of Corcept’s cybersecurity program. Reporting to the Director of IT, this role will provide oversight of Corcept’s cybersecurity services, security operations, technology platforms, and cybersecurity initiatives while partnering closely with Infrastructure, business teams, and external service providers.

This role requires a hands-on cybersecurity leader who can operate effectively across both technical and management responsibilities. The Associate Director will oversee Corcept’s managed security service provider, establish clear accountability across cybersecurity service areas, drive security initiatives through completion, and ensure security risks and operational issues are identified, prioritized, and addressed.

This is a hybrid role, typically requiring on-site presence 4 days per week.

Responsibilities:

  • Lead the day-to-day execution of Corcept’s cybersecurity program and roadmap
  • Manage and provide oversight of the cybersecurity MSP, ensuring strong service delivery, accountability, SLA performance, escalation, and continuous improvement
  • Oversee cybersecurity services across SOC/XSIAM, endpoint and email security, vulnerability management, firewall security, AWS cloud security, threat hunting, brand monitoring, an TPRM
  • Provide leadership for cybersecurity incidents, coordinating investigation, containment, remediation, escalation, and follow-up actions
  • Oversee key security technologies, including Okta, CrowdStrike Falcon Complete, Palo Alto firewalls, Cortex XSIAM, AWS security services, and Microsoft security platforms
  • Drive vulnerability and risk management, ensuring significant findings are prioritized, assigned, remediated, and tracked to closure
  • Partner with Infrastructure, Cloud, Applications, Legal, Privacy, Compliance, and business teams to incorporate security into technology initiatives and business processes
  • Establish and monitor security KPIs, service metrics, risks, and trends, providing clear updates and recommendations to IT leadership
  • Manage cybersecurity vendors and service providers, ensuring solutions and services meet Corcept’s security and business requirements
  • Maintain and continuously improve cybersecurity standards, processes, incident response procedures, and operational documentation
  • Promote cybersecurity awareness and support training and security education across the organization
  • Uphold Corcept’s Key Principles by driving collaboration, embracing possibilities, following the data, and leading by doing
  • Preferred Skills, Qualifications and Technical Proficiencies:

  • Strong cybersecurity leadership experience across security operations, incident response, vulnerability management, endpoint security, identity and access management, network security, and cloud security
  • Experience managing an MSP/MSSP cybersecurity delivery model, including service performance, SLAs, escalations, metrics, and continuous improvement
  • Strong working knowledge of Okta, CrowdStrike Falcon Complete, Palo Alto firewalls/Cortex XSIAM, AWS security services, and Microsoft security technologies
  • Experience overseeing SOC operations, threat detection and hunting, endpoint/email security, vulnerability management, firewall security, cloud security, and TPRM
  • Strong understanding of cybersecurity frameworks and industry practices, including NIST CSF and CIS Controls
  • Experience identifying and communicating cybersecurity risks and driving remediation across Infrastructure, Cloud, Applications, and business teams
  • Strong analytical and problem-solving skills with the ability to balance security risk with business requirements
  • Excellent communication and leadership skills, with the ability to work effectively with technical teams, business stakeholders, senior leadership, and external service providers
  • Preferred Education and Experience:

  • BS/BA degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience
  • 8+ years of progressive experience in cybersecurity, information security, or related technology roles
  • 5+ years of leadership experience managing cybersecurity teams, programs, or managed security services
  • Experience managing an MSP/MSSP, including service delivery, performance, escalations, and vendor accountability
  • Experience supporting Life Sciences, biotechnology, pharmaceutical, or other regulated environments preferred
  • Demonstrated experience leading cybersecurity initiatives across cloud, infrastructure, identity, endpoint, network, and security operations
  • Relevant certifications such as CISSP, CISM, CCSP, or AWS Certified Security - Specialty preferred
  • Experience working with senior leadership and cross-functional teams to communicate risk and drive cybersecurity initiatives
  • The pay range that the Company reasonably expects to pay for this headquarters-based position is $185,000-$240,000; the pay ultimately offered may vary based on legitimate considerations, including geographic location, job-related knowledge, skills, experience, and education.

    Applicants must be currently authorized to work in the United States on a full-time basis.

    For information on how Corcept collects, uses, discloses, protects, and otherwise processes personal information and an explanation of the rights and choices available to you with respect to your personal information, please refer to our Privacy Notice link.

    Corcept appreciates the commitment and hard work of all our team members as we strive to discover and develop novel treatments for patients with serious unmet medical needs.

    Please visit our website at: https://www.corcept.com/

    Corcept is an Equal Opportunity Employer

    Corcept will not conduct interviews via text message or messaging platforms and will not ask you to download anything as part of your interview. Though we use third-party tools to help with advertising our jobs, please be vigilant in checking that the communication is in fact coming from Corcept.

    Ready to apply?
    You'll be redirected to Corcept Therapeutics's application page.

    Similar roles

    See how RiseMe works

    Match, tailor, and prep so you send fewer applications and land more interviews.