Associate Director, Cybersecurity

For more than 25 years, Corcept has been singularly focused on the science of cortisol, a powerful hormone that when unregulated, can play a role in a broad range of diseases.

Our commercial portfolio includes treatments for hypercortisolism and oncology, and the company has discovered more than 1,000 proprietary selective cortisol modulators and glucocorticoid receptor antagonists. With advanced clinical trials in patients with hypercortisolism, solid tumors, ALS and liver disease, Corcept is unlocking the power of cortisol modulation to help address some of the most devastating diseases patients face today.

Corcept is headquartered in Redwood City, California. To learn more, visit www.corcept.com.

The Associate Director of Cybersecurity will lead the day-to-day execution and continuous improvement of Corcept’s cybersecurity program. Reporting to the Director of IT, this role will provide oversight of Corcept’s cybersecurity services, security operations, technology platforms, and cybersecurity initiatives while partnering closely with Infrastructure, business teams, and external service providers.

This role requires a hands-on cybersecurity leader who can operate effectively across both technical and management responsibilities. The Associate Director will oversee Corcept’s managed security service provider, establish clear accountability across cybersecurity service areas, drive security initiatives through completion, and ensure security risks and operational issues are identified, prioritized, and addressed.

This is a hybrid role, typically requiring on-site presence 4 days per week.

Responsibilities:

• Lead the day-to-day execution of Corcept’s cybersecurity program and roadmap
• Manage and provide oversight of the cybersecurity MSP, ensuring strong service delivery, accountability, SLA performance, escalation, and continuous improvement
• Oversee cybersecurity services across SOC/XSIAM, endpoint and email security, vulnerability management, firewall security, AWS cloud security, threat hunting, brand monitoring, an TPRM
• Provide leadership for cybersecurity incidents, coordinating investigation, containment, remediation, escalation, and follow-up actions
• Oversee key security technologies, including Okta, CrowdStrike Falcon Complete, Palo Alto firewalls, Cortex XSIAM, AWS security services, and Microsoft security platforms
• Drive vulnerability and risk management, ensuring significant findings are prioritized, assigned, remediated, and tracked to closure
• Partner with Infrastructure, Cloud, Applications, Legal, Privacy, Compliance, and business teams to incorporate security into technology initiatives and business processes
• Establish and monitor security KPIs, service metrics, risks, and trends, providing clear updates and recommendations to IT leadership
• Manage cybersecurity vendors and service providers, ensuring solutions and services meet Corcept’s security and business requirements
• Maintain and continuously improve cybersecurity standards, processes, incident response procedures, and operational documentation
• Promote cybersecurity awareness and support training and security education across the organization
• Uphold Corcept’s Key Principles by driving collaboration, embracing possibilities, following the data, and leading by doing

Preferred Skills, Qualifications and Technical Proficiencies:

• Strong cybersecurity leadership experience across security operations, incident response, vulnerability management, endpoint security, identity and access management, network security, and cloud security
• Experience managing an MSP/MSSP cybersecurity delivery model, including service performance, SLAs, escalations, metrics, and continuous improvement
• Strong working knowledge of Okta, CrowdStrike Falcon Complete, Palo Alto firewalls/Cortex XSIAM, AWS security services, and Microsoft security technologies
• Experience overseeing SOC operations, threat detection and hunting, endpoint/email security, vulnerability management, firewall security, cloud security, and TPRM
• Strong understanding of cybersecurity frameworks and industry practices, including NIST CSF and CIS Controls
• Experience identifying and communicating cybersecurity risks and driving remediation across Infrastructure, Cloud, Applications, and business teams
• Strong analytical and problem-solving skills with the ability to balance security risk with business requirements
• Excellent communication and leadership skills, with the ability to work effectively with technical teams, business stakeholders, senior leadership, and external service providers

Preferred Education and Experience:

• BS/BA degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience
• 8+ years of progressive experience in cybersecurity, information security, or related technology roles
• 5+ years of leadership experience managing cybersecurity teams, programs, or managed security services

…