Vice President, Chief Information Security Officer (CISO)

Who We Are:

Neurocrine Biosciences is a leading biopharmaceutical company with a simple purpose: to relieve suffering for people with great needs. We are dedicated to discovering, developing and commercializing life-changing treatments for patients with under-addressed neurological, psychiatric, endocrine and immunological disorders. The company's diverse portfolio includes FDA-approved treatments for tardive dyskinesia, chorea associated with Huntington's disease, classic congenital adrenal hyperplasia, hyperphagia in Prader-Willi syndrome, endometriosis* and uterine fibroids*, as well as a robust pipeline including multiple compounds in mid- to late-phase clinical development across our core therapeutic areas. For more than three decades, we have applied our unique insight into neuroscience and the interconnections between brain and body systems to treat complex conditions. We relentlessly pursue medicines to ease the burden of debilitating diseases and disorders, because you deserve brave science. For more information, visit neurocrine.com, and follow the company on LinkedIn, X, Facebook and YouTube. (*in collaboration with AbbVie)

At Neurocrine, strong leadership drives both business results and team success. We look for leaders who think strategically, anticipate what’s ahead and set clear direction, while building and empowering high-performing teams. Successful leaders foster an environment where people are motivated to do their best work and deliver meaningful, measurable impact through sound decision-making and accountability.



About the Role:

Provides strategic and organizational leadership for the company’s information security and cybersecurity program, establishing the vision, strategy, governance, architecture, policies, and controls necessary to protect the company’s information, technology, and digital assets. Serves as a trusted advisor to executive leadership and partners across the enterprise to identify and manage cyber risk while enabling business objectives, innovation, and an effective employee and customer experience. Safeguards the scientific, clinical, and corporate data that underpin Neurocrine’s drug discovery and development mission, including GxP-validated systems and clinical trial platforms.

Builds advocacy, trust, and shared accountability for security across the organization through strong cross-functional partnership, clear and effective communication, sound judgment, and proactive stakeholder engagement. Balances the urgency of security and risk mitigation with business priorities, operational needs, regulatory requirements, and user experience to implement controls that are appropriately risk-based, practical, scalable, and sustainable.

Leads and develops a high-performing cybersecurity organization and fosters a culture in which security is viewed as an enterprise enabler and shared responsibility. Anticipates the organizational impact of security decisions, effectively influences stakeholders at all levels, and ensures cybersecurity capabilities evolve with the company’s business strategy, technology landscape, and threat environment. Partners directly with the Board of Directors and Audit/Risk Committee to ensure cyber risk oversight is embedded in enterprise governance.

_

Your Contributions (include, but are not limited to):

• Assess the current state of the information security program and develop and execute a strategic roadmap to evolve and mature cybersecurity capabilities in alignment with the company’s business strategy, risk profile, regulatory requirements, and technology environment
• Identify and assess information security priorities, emerging threats, vulnerabilities, and control gaps; monitor compliance with established standards and policies; and apply sound, risk-based judgment to prioritize remediation based on business impact, likelihood, and organizational risk
• Establish annual and long-range security and compliance goals, strategies, performance metrics, reporting mechanisms, maturity models, and roadmaps that demonstrate measurable improvement in cybersecurity capabilities and risk reduction
• Develop and oversee a comprehensive Identity and Access Management strategy and architecture, including appropriate governance, privileged access, authentication, authorization, and lifecycle management
• Serve as a trusted cybersecurity advisor to executive leadership and business leaders, translating complex cybersecurity risks into clear business implications, options, and recommendations that enable informed decision-making
• Represent Neurocrine’s information security posture and program with key customers, partners, regulators, auditors, and other internal and external stakeholders, as appropriate
• Create a culture of information security awareness through effective training, communications, and engagement programs that promote shared accountability for protecting company information and systems

…