About Acadia Pharmaceuticals

Acadia is committed to turning scientific promise into meaningful innovation that makes the difference for underserved neurological and rare disease communities around the world. Our commercial portfolio includes the first and only FDA-approved treatments for Parkinson’s disease psychosis and Rett syndrome. We are developing the next wave of therapeutic advancements with a robust and diverse pipeline that includes mid- to late-stage programs in Alzheimer’s disease psychosis and Lewy body dementia psychosis, along with earlier-stage programs that address other underserved patient needs. At Acadia, we’re here to be their difference.

Please note that this position can be based in San Diego, CA. Acadia's hybrid model requires this role to work in our office three days per week on average.

Position Summary

The Cyber Risk Analyst will be responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and cyber risk management program. The Cyber Risk Analyst will be an active member of any risk management committees. This position will have ownership the cyber Third Part Risk Management (TPRM) program.

Primary Responsibilities

Conduct risk assessments and audits of IT systems, applications, and third-party vendors.
Perform contract reviews with a focus on cybersecurity terms and third-party risk implications.
Develop and maintain risk registers, mitigation plans, and incident response strategies.
Perform and maintain Business Impact Analysis (BIA) of key systems and vendors.
Maintain the Business Continuity and Disaster Recovery Plan (BCDRP).
Collaborate with stakeholders across Legal/Compliance/Privacy, Procurement, IT, and various business units to implement security controls and improve overall risk posture.
Maintain and enhance Governance, Risk, and Compliance (GRC) tools, such as OneTrust.
Align cyber risk activities with relevant regulatory requirements (CCPA, U.S. SEC, GDPR, NIS 2 Directive, etc.).
Support SOX and ITGC compliance efforts, including audit preparation, evidence collection, and control testing.
Contribute to the development and maintenance of security policies, procedures, and training programs.
Prepare risk reports for senior leadership and non-technical stakeholders, translating technical findings into business-relevant insights.
Ensures that all actions, both internally and externally, working on Acadia’s behalf are in compliance with all laws regulations, policies and demonstrates Acadia values.
Other responsibilities as assigned.

Education/Experience/Skills

Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, or a related field. Targeting 3 years of progressively responsible experience in cyber risk, information security, or IT audit. Advanced certifications (CISM/CRISC/CISA/FAIR/CISSP) strongly preferred. An equivalent combination of relevant education and experience may be considered.

Key Skills:

Proven ability to conduct risk assessments and audits of IT systems, applications, and third-party vendors.
Strong understanding of regulatory frameworks and standards including NIST, ISO 27001, SOX, GDPR, NIS 2 Directive, and FAIR.
Skilled in developing and maintaining risk registers, mitigation plans, and incident response strategies.
Proficient in GRC platforms such as OneTrust, with experience in tool configuration and workflow optimization.
Strong analytical, organizational, and communication skills.
Skills to translate technical risk findings into actionable insights for senior leadership and non-technical stakeholders.
Ability to manage multiple priorities and work cross-functionally in a fast-paced environment.
Ability to travel on occasions.
Must be able and willing to travel on occasion.

Physical Requirements

This role involves regular standing, walking, sitting, and the use of hands for handling or operating equipment. The employee may also need to reach, climb, balance, stoop, kneel, crouch, and maintain visual, verbal, and auditory communication in a standard office environment and while working independently from remote locations. The employee must occasionally lift and/or move up to 20 pounds. This position requires the ability to travel independently overnight and/or work after hours as required by travel schedules or business needs.

In addition to a competitive base salary, this position is also eligible for discretionary bonus and equity awards based on factors such as individual and organizational performance. Actual amounts will vary depending on experience, performance, and location.

Salary Range

$29.33—$36.59 USD

What we offer US-based Employees:

Competitive base, bonus, new hire and ongoing equity packages
Medical, dental, and vision insurance
Employer-paid life, disability, business travel and EAP coverage
401(k) Plan with a fully vested company match 1:1 up to 5%
Employee Stock Purchase Plan with a 2-year purchase price lock-in
15+ vacation days
13 -15 paid holidays, including office closure between December 24th and January 1st
10 days of paid sick time
Paid parental leave benefit
Tuition assistance

EEO Statement (US-based Employees): Studies have shown that women and people of color are less likely to apply for jobs unless they believe they meet every one of the qualifications in the exact way they are described in job postings. We are committed to building a diverse, equitable, inclusive, and innovative company, and we are looking for the BEST candidate for the job. That candidate may be one who comes from a less traditional background or may meet the qualifications in a different way. We strongly encourage you to apply, especially if the reason you are the best candidate isn’t exactly what we describe here.

It is the policy of Acadia to provide equal employment opportunities to all employees and employment applicants without regard to considerations of race, including related to hairstyle, color, religion or religious creed, sexual orientation, gender, gender identity, gender expression, gender transition, country of origin, ancestry, citizenship, age, physical or mental disability, genetic information, legally-protected medical condition or information, marital status, domestic partner status, family care status, military caregiver status, veteran or military status (including reserve status, National Guard status, and military service or obligation), status as a victim of domestic violence, sexual assault or stalking, enrollment in a public assistance program, or any basis protected under federal, state or local law.

As an equal opportunity employer, Acadia is committed to a diverse workforce. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation. Furthermore, you may request additional support if you are unable or limited in your ability to use or access Acadia’s career website due to your disability, along with any accommodations throughout the interview process. To request or inquire about your reasonable accommodation, please complete our Reasonable Accommodation Request Form or contact us at talentacquisition@acadia-pharm.com or 858-261-2923.

Please note that reasonable accommodations granted throughout the recruiting process are not guaranteed to be the same accommodations given if hired. A new request will need to be submitted for any ADA accommodations after starting employment.

California Applicants: Please see Additional Information for California Residents within our Privacy Policy.

Canadian Applicants: Please see Additional Information for Canadian Residents within our Privacy Policy.

Applicants in the European Economic Area, Switzerland, the United Kingdom, and Serbia: Please see Additional Information for Individuals in the European Economic Area, Switzerland, the United Kingdom, and Serbia within our Privacy Policy.

Notice to Search Firms/Third-Party Recruitment Agencies (Recruiters): The Talent Acquisition team manages the recruitment and employment process for Acadia Pharmaceuticals Inc. (“Acadia”). Acadia does not accept resumes from recruiters or search firms without an executed search agreement in place. Resumes sent to Acadia employees in the absence of an executed search agreement will not obligate Acadia in any way with respect to the future employment of those individuals or potential remuneration to any recruiter or search firm. Candidates should never be submitted directly to our hiring managers or employees.

Acadia Pharmaceuticals Inc.

New Jobs

Cyber Risk Analyst