Associate Director, Cybersecurity

Corcept Therapeutics•Redwood City, CA

2d•Hybrid

About The Position

The Associate Director of Cybersecurity will lead the day-to-day execution and continuous improvement of Corcept’s cybersecurity program. Reporting to the Director of IT, this hands-on cybersecurity leader will oversee cybersecurity services, security operations, technology platforms, and initiatives while partnering with Infrastructure, business teams, and external service providers. The role oversees Corcept’s managed security service provider, establishes accountability across cybersecurity service areas, drives initiatives to completion, and ensures security risks and operational issues are identified, prioritized, and addressed. This is a hybrid role, typically requiring on-site presence four days per week.

Requirements

Strong cybersecurity leadership experience across security operations, incident response, vulnerability management, endpoint security, identity and access management, network security, and cloud security.
Experience managing an MSP/MSSP cybersecurity delivery model, including service performance, SLAs, escalations, metrics, and continuous improvement.
Strong working knowledge of Okta, CrowdStrike Falcon Complete, Palo Alto firewalls/Cortex XSIAM, AWS security services, and Microsoft security technologies.
Experience overseeing SOC operations, threat detection and hunting, endpoint/email security, vulnerability management, firewall security, cloud security, and TPRM.
Strong understanding of cybersecurity frameworks and industry practices, including NIST CSF and CIS Controls.
Experience identifying and communicating cybersecurity risks and driving remediation across Infrastructure, Cloud, Applications, and business teams.
Strong analytical and problem-solving skills, with the ability to balance security risk with business requirements.
Excellent communication and leadership skills, including the ability to work effectively with technical teams, business stakeholders, senior leadership, and external service providers.
BS/BA degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience.
At least 8 years of progressive experience in cybersecurity, information security, or related technology roles.
At least 5 years of leadership experience managing cybersecurity teams, programs, or managed security services.
Experience managing an MSP/MSSP, including service delivery, performance, escalations, and vendor accountability.
Demonstrated experience leading cybersecurity initiatives across cloud, infrastructure, identity, endpoint, network, and security operations.
Experience working with senior leadership and cross-functional teams to communicate risk and drive cybersecurity initiatives.
Must be currently authorized to work in the United States on a full-time basis.

Nice To Haves

Experience supporting Life Sciences, biotechnology, pharmaceutical, or other regulated environments.
Relevant certifications such as CISSP, CISM, CCSP, or AWS Certified Security - Specialty.

Responsibilities

Lead the day-to-day execution of Corcept’s cybersecurity program and roadmap.
Manage and oversee the cybersecurity MSP, ensuring service delivery, accountability, SLA performance, escalation, and continuous improvement.
Oversee cybersecurity services across SOC/XSIAM, endpoint and email security, vulnerability management, firewall security, AWS cloud security, threat hunting, brand monitoring, and TPRM.
Lead cybersecurity incidents, coordinating investigation, containment, remediation, escalation, and follow-up actions.
Oversee key security technologies, including Okta, CrowdStrike Falcon Complete, Palo Alto firewalls, Cortex XSIAM, AWS security services, and Microsoft security platforms.
Drive vulnerability and risk management by prioritizing significant findings and ensuring they are assigned, remediated, and tracked to closure.
Partner with Infrastructure, Cloud, Applications, Legal, Privacy, Compliance, and business teams to incorporate security into technology initiatives and business processes.
Establish and monitor security KPIs, service metrics, risks, and trends, and provide clear updates and recommendations to IT leadership.
Manage cybersecurity vendors and service providers, ensuring their solutions and services meet Corcept’s security and business requirements.
Maintain and continuously improve cybersecurity standards, processes, incident response procedures, and operational documentation.
Promote cybersecurity awareness and support training and security education across the organization.
Uphold Corcept’s Key Principles by driving collaboration, embracing possibilities, following the data, and leading by doing.