Identity and Data Cyber Defense Lead

Job Details:

Job Description:

About the Role

Altera is seeking an experienced Identity and Data Cyber Defense Lead to lead enterprise identity and access management, privileged access management, and data loss prevention programs. This role will strengthen security controls protecting corporate systems, sensitive semiconductor design data, source code, and intellectual property. The ideal candidate will drive security strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance, operational efficiency, and enterprise security maturity.

Responsibilities:

Identity and Access Management

Lead the enterprise identity and access management strategy across workforce, privileged, service, application, vendor, and non-human identities.

Establish governance for identity lifecycle management, joiner-mover-leaver processes, authentication, authorization, access requests, and access reviews.

Oversee Microsoft Entra ID/Azure AD capabilities, including conditional access, identity protection, privileged identity management, authentication methods, application registrations, and federation.

Lead SailPoint identity governance capabilities, including identity lifecycle workflows, role management, access requests, access certifications, policy enforcement, and reporting.

Improve identity data quality, ownership, entitlement transparency, and timely deprovisioning across critical applications and platforms.

Partner with application, infrastructure, cloud, HR, and business teams to integrate identity controls into enterprise processes.

Establish measurable improvements in orphaned-account reduction, access-request turnaround, deprovisioning timeliness, certification completion, and policy compliance.

Privileged Access Management

Lead the enterprise privileged access management program for administrators, service accounts, emergency accounts, cloud administrators, and other high-risk identities.

Define requirements for privileged account discovery, vaulting, credential rotation, session monitoring, just-in-time access, and break-glass controls.

Partner with infrastructure, cloud, network, engineering, and IT teams to onboard critical privileged accounts and systems.

Monitor privileged access exceptions, unresolved risks, control failures, and overdue remediation actions.

Improve visibility and accountability for privileged activity across corporate, cloud, engineering, and production environments.

Data Loss Prevention and Information Protection

Lead enterprise Data Loss Prevention and information protection strategy across endpoints, email, collaboration platforms, cloud services, applications, and data repositories.

Define and implement controls for sensitive semiconductor design data, source code, engineering and design information, customer data, employee data, financial information, and intellectual property.

Establish data classification, labeling, handling, retention, encryption, sharing, and monitoring requirements in partnership with Data Governance, Legal, Privacy, and business stakeholders.

Develop and tune DLP policies to reduce data leakage while minimizing unnecessary business disruption and false positives.

Oversee incident triage, investigation, escalation, and remediation for suspected data loss and policy violations.

Measure improvements in sensitive-data discovery, labeling coverage, DLP policy effectiveness, incident resolution, and exception closure.

Program Operations and Continuous Improvement

Establish governance meetings, operating rhythms, action tracking, escalation processes, and cross-functional follow-up.

Develop and maintain security standards, procedures, runbooks, job aids, knowledge articles, and training materials.

Define service-level expectations and performance measures for identity, device, and data security processes.

Conduct periodic quality reviews of access records, certification outcomes, DLP alerts, endpoint coverage, control evidence, and remediation activity.

Identify opportunities to improve automation, data quality, process efficiency, stakeholder adoption, and security program maturity.

Develop dashboards and reports covering:

Access certification completion and exceptions

Privileged access coverage and risk

Identity lifecycle timeliness

Endpoint protection and compliance

DLP incidents and remediation

Sensitive-data classification and coverage

Audit and SOX/ITGC readiness

Open risks, issues, and remediation progress

Salary Range

The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.

$149,100 - $215,925 USD

We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.

#LI-MD1

Qualifications:

Minimum Qualifications

• •Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• •8+ years of experience in cybersecurity, identity and access management, privileged access management, or data protection.
• •5+ years of experience leading or managing enterprise security programs, initiatives, or cross-functional projects.
• •Hands-on experience with Microsoft Entra ID/Azure AD, SailPoint, privileged access management, and data loss prevention technologies.
• •Experience establishing security policies, governance processes, metrics, and compliance reporting.

Job Type:

Regular

Shift:

Shift 1 (United States of America)

Primary Location:

San Jose, California, United States

Additional Locations:

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.