Cyber Risk Analyst
About The Position
Acadia is committed to turning scientific promise into meaningful innovation that makes the difference for underserved neurological and rare disease communities around the world. Our commercial portfolio includes the first and only FDA-approved treatments for Parkinson’s disease psychosis and Rett syndrome. We are developing the next wave of therapeutic advancements with a robust and diverse pipeline that includes mid- to late-stage programs in Alzheimer’s disease psychosis and Lewy body dementia psychosis, along with earlier-stage programs that address other underserved patient needs. At Acadia, we’re here to be their difference. Please note that this position can be based in San Diego, CA. Acadia's hybrid model requires this role to work in our office three days per week on average. The Cyber Risk Analyst will be responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and cyber risk management program. The Cyber Risk Analyst will be an active member of any risk management committees. This position will have ownership the cyber Third Part Risk Management (TPRM) program.
Requirements
- Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, or a related field. Targeting 3 years of progressively responsible experience in cyber risk, information security, or IT audit. An equivalent combination of relevant education and experience may be considered.
- Proven ability to conduct risk assessments and audits of IT systems, applications, and third-party vendors.
- Strong understanding of regulatory frameworks and standards including NIST, ISO 27001, SOX, GDPR, NIS 2 Directive, and FAIR.
- Skilled in developing and maintaining risk registers, mitigation plans, and incident response strategies.
- Proficient in GRC platforms such as OneTrust, with experience in tool configuration and workflow optimization.
- Strong analytical, organizational, and communication skills.
- Skills to translate technical risk findings into actionable insights for senior leadership and non-technical stakeholders.
- Ability to manage multiple priorities and work cross-functionally in a fast-paced environment.
- Ability to travel on occasions.
- Must be able and willing to travel on occasion.
Nice To Haves
- Advanced certifications (CISM/CRISC/CISA/FAIR/CISSP) strongly preferred.
Responsibilities
- Conduct risk assessments and audits of IT systems, applications, and third-party vendors.
- Perform contract reviews with a focus on cybersecurity terms and third-party risk implications.
- Develop and maintain risk registers, mitigation plans, and incident response strategies.
- Perform and maintain Business Impact Analysis (BIA) of key systems and vendors.
- Maintain the Business Continuity and Disaster Recovery Plan (BCDRP).
- Collaborate with stakeholders across Legal/Compliance/Privacy, Procurement, IT, and various business units to implement security controls and improve overall risk posture.
- Maintain and enhance Governance, Risk, and Compliance (GRC) tools, such as OneTrust.
- Align cyber risk activities with relevant regulatory requirements (CCPA, U.S. SEC, GDPR, NIS 2 Directive, etc.).
- Support SOX and ITGC compliance efforts, including audit preparation, evidence collection, and control testing.
- Contribute to the development and maintenance of security policies, procedures, and training programs.
- Prepare risk reports for senior leadership and non-technical stakeholders, translating technical findings into business-relevant insights.
- Ensures that all actions, both internally and externally, working on Acadia’s behalf are in compliance with all laws regulations, policies and demonstrates Acadia values.
- Other responsibilities as assigned.
Benefits
- Competitive base, bonus, new hire and ongoing equity packages
- Medical, dental, and vision insurance
- Employer-paid life, disability, business travel and EAP coverage
- 401(k) Plan with a fully vested company match 1:1 up to 5%
- Employee Stock Purchase Plan with a 2-year purchase price lock-in
- 15+ vacation days
- 13 -15 paid holidays, including office closure between December 24th and January 1st
- 10 days of paid sick time
- Paid parental leave benefit
- Tuition assistance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
