Associate Director, Cybersecurity

Corcept Therapeutics•Redwood City, CA

2d•$185,000 - $240,000•Hybrid

About The Position

The Associate Director of Cybersecurity will lead the day-to-day execution and continuous improvement of Corcept’s cybersecurity program. Reporting to the Director of IT, this role oversees cybersecurity services, security operations, technology platforms, and cybersecurity initiatives while partnering with Infrastructure, business teams, and external service providers. This is a hands-on cybersecurity leadership role spanning technical and management responsibilities. The Associate Director will oversee Corcept’s managed security service provider, establish accountability across cybersecurity service areas, drive security initiatives through completion, and ensure risks and operational issues are identified, prioritized, and addressed. The role is hybrid and typically requires on-site presence four days per week.

Requirements

8+ years of progressive experience in cybersecurity, information security, or related technology roles.
5+ years of leadership experience managing cybersecurity teams, programs, or managed security services.
Strong cybersecurity leadership experience across security operations, incident response, vulnerability management, endpoint security, identity and access management, network security, and cloud security.
Experience managing an MSP/MSSP cybersecurity delivery model, including service performance, SLAs, escalations, metrics, continuous improvement, and vendor accountability.
Strong working knowledge of Okta, CrowdStrike Falcon Complete, Palo Alto firewalls/Cortex XSIAM, AWS security services, and Microsoft security technologies.
Experience overseeing SOC operations, threat detection and hunting, endpoint/email security, vulnerability management, firewall security, cloud security, and TPRM.
Strong understanding of cybersecurity frameworks and industry practices, including NIST CSF and CIS Controls.
Experience identifying and communicating cybersecurity risks and driving remediation across Infrastructure, Cloud, Applications, and business teams.
Strong analytical and problem-solving skills, with the ability to balance security risk with business requirements.
Excellent communication and leadership skills, with the ability to work effectively with technical teams, business stakeholders, senior leadership, and external service providers.
BS/BA degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience.
Demonstrated experience leading cybersecurity initiatives across cloud, infrastructure, identity, endpoint, network, and security operations.
Experience working with senior leadership and cross-functional teams to communicate risk and drive cybersecurity initiatives.
Must be currently authorized to work in the United States on a full-time basis.

Nice To Haves

Experience supporting Life Sciences, biotechnology, pharmaceutical, or other regulated environments.
Relevant certifications such as CISSP, CISM, CCSP, or AWS Certified Security - Specialty.

Responsibilities

Lead the day-to-day execution of Corcept’s cybersecurity program and roadmap.
Manage and oversee the cybersecurity MSP, ensuring service delivery, accountability, SLA performance, escalation, and continuous improvement.
Oversee cybersecurity services across SOC/XSIAM, endpoint and email security, vulnerability management, firewall security, AWS cloud security, threat hunting, brand monitoring, and TPRM.
Lead cybersecurity incident response, coordinating investigation, containment, remediation, escalation, and follow-up actions.
Oversee key security technologies, including Okta, CrowdStrike Falcon Complete, Palo Alto firewalls, Cortex XSIAM, AWS security services, and Microsoft security platforms.
Drive vulnerability and risk management, ensuring significant findings are prioritized, assigned, remediated, and tracked to closure.
Partner with Infrastructure, Cloud, Applications, Legal, Privacy, Compliance, and business teams to incorporate security into technology initiatives and business processes.
Establish and monitor security KPIs, service metrics, risks, and trends, and provide updates and recommendations to IT leadership.
Manage cybersecurity vendors and service providers, ensuring their solutions and services meet Corcept’s security and business requirements.
Maintain and continuously improve cybersecurity standards, processes, incident response procedures, and operational documentation.
Promote cybersecurity awareness and support organizational training and security education.
Uphold Corcept’s Key Principles by driving collaboration, embracing possibilities, following the data, and leading by doing.