Identity and Data Cyber Defense Lead

Altera Corporation; San Jose (CA); On-site; USD 149,000 - 216,000; Full time

Job summary

Altera Corporation in San Jose seeks an experienced Identity and Data Cyber Defense Lead to drive enterprise IAM, PAM, and DLP programs for semiconductor design data, source code, and intellectual property.

You will set security strategy, governance, and metrics, partner with IT, engineering, and legal teams, and advance compliance and security maturity across the organization.

Qualifications

• Bachelor's degree or higher in Cybersecurity/IT/CS or related field
• 8+ years in cybersecurity, IAM, PAM, or data protection
• 5+ years leading enterprise security programs
• Hands-on with Entra ID/Azure AD, SailPoint, PAM, and DLP technologies
• Experience establishing security policies, governance processes, metrics, and compliance reporting

Responsibilities

• Lead IAM strategy across workforce, privileged, service, app, vendor, and non-human identities
• Oversee Entra ID/Azure AD capabilities, conditional access, PIM, authentication methods
• Lead SailPoint identity governance including lifecycle workflows and access reviews
• Improve identity data quality, ownership, entitlement transparency, and deprovisioning
• Lead POP with cross-functional teams to improve policy enforcement and audit readiness
• Lead PAM program for admins and high-risk identities; credential rotation and break-glass controls
• Lead DLP strategy across endpoints, email, cloud services, and data repositories
• Establish governance meetings, runbooks, SLAs, and performance measures
• Develop dashboards on access & certification, privileged access, identity lifecycles
• Audit readiness for SOX/ITGC and data-loss remediation

Skills

Governance & policy

Program leadership

Cross-functional collaboration

Security strategy

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Microsoft Entra ID/Azure AD

SailPoint

Privileged access management

Data Loss Prevention (DLP)

SOX/ITGC tooling

Job description

## Identity and Data Cyber Defense LeadApply: San Jose, California, United States: Full time: Posted 9 Days Ago: R03280# **Job Details:**### ## **Job Description:****About the Role**Altera is seeking an experienced **Identity and Data Cyber Defense Lead** to lead enterprise identity and access management, privileged access management, and data loss prevention programs. This role will strengthen security controls protecting corporate systems, sensitive semiconductor design data, source code, and intellectual property. The ideal candidate will drive security strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance, operational efficiency, and enterprise security maturity. **Responsibilities:****Identity and Access Management** * Lead the enterprise identity and access management strategy across workforce, privileged, service, application, vendor, and non-human identities.* Establish governance for identity lifecycle management, joiner-mover-leaver processes, authentication, authorization, access requests, and access reviews.* Oversee Microsoft Entra ID/Azure AD capabilities, including conditional access, identity protection, privileged identity management, authentication methods, application registrations, and federation.* Lead SailPoint identity governance capabilities, including identity lifecycle workflows, role management, access requests, access certifications, policy enforcement, and reporting.* Improve identity data quality, ownership, entitlement transparency, and timely deprovisioning across critical applications and platforms.* Partner with application, infrastructure, cloud, HR, and business teams to integrate identity controls into enterprise processes.* Establish measurable improvements in orphaned-account reduction, access-request turnaround, deprovisioning timeliness, certification completion, and policy compliance. **Privileged Access Management** * Lead the enterprise privileged access management program for administrators, service accounts, emergency accounts, cloud administrators, and other high-risk identities.* Define requirements for privileged account discovery, vaulting, credential rotation, session monitoring, just-in-time access, and break-glass controls.* Partner with infrastructure, cloud, network, engineering, and IT teams to onboard critical privileged accounts and systems.* Monitor privileged access exceptions, unresolved risks, control failures, and overdue remediation actions.* Improve visibility and accountability for privileged activity across corporate, cloud, engineering, and production environments. **Data Loss Prevention and Information Protection** * Lead enterprise Data Loss Prevention and information protection strategy across endpoints, email, collaboration platforms, cloud services, applications, and data repositories.* Define and implement controls for sensitive semiconductor design data, source code, engineering and design information, customer data, employee data, financial information, and intellectual property.* Establish data classification, labeling, handling, retention, encryption, sharing, and monitoring requirements in partnership with Data Governance, Legal, Privacy, and business stakeholders.* Develop and tune DLP policies to reduce data leakage while minimizing unnecessary business disruption and false positives.* Oversee incident triage, investigation, escalation, and remediation for suspected data loss and policy violations.* Measure improvements in sensitive-data discovery, labeling coverage, DLP policy effectiveness, incident resolution, and exception closure. **Program Operations and Continuous Improvement** * Establish governance meetings, operating rhythms, action tracking, escalation processes, and cross-functional follow-up.* Develop and maintain security standards, procedures, runbooks, job aids, knowledge articles, and training materials.* Define service-level expectations and performance measures for identity, device, and data security processes.* Conduct periodic quality reviews of access records, certification outcomes, DLP alerts, endpoint coverage, control evidence, and remediation activity.* Identify opportunities to improve automation, data quality, process efficiency, stakeholder adoption, and security program maturity.* Develop dashboards and reports covering:* Access certification completion and exceptions* Privileged access coverage and risk* Identity lifecycle timeliness* Endpoint protection and compliance* DLP incidents and remediation* Sensitive-data classification and coverage* Audit and SOX/ITGC readiness* Open risks, issues, and remediation progress **Salary Range**The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance. **$149,100 - $215,925 USD**We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations. #LI-MD1### ## **Qualifications:****Minimum Qualifications*** Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.* 8+ years of experience in cybersecurity, identity and access management, privileged access management, or data protection.* 5+ years of experience leading or managing enterprise security programs, initiatives, or cross-functional projects.* Hands-on experience with Microsoft Entra ID/Azure AD, SailPoint, privileged access management, and data loss prevention technologies.* Experience establishing security policies, governance processes, metrics, and compliance reporting.### ## **Job Type:**Regular### ## **Shift:**Shift 1 (United States of America)### ## **Primary Location:**San Jose, California, United States### ## **Additional Locations:**### ## **Posting Statement:**All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.