Identity and Data Cyber Defense Lead

Altera; San Jose (CA); Sur place; USD 149 000 - 216 000; Plein temps

Résumé du poste

Altera is seeking an Identity and Data Cyber Defense Lead to guide enterprise IAM, PAM, and DLP programs. You will drive strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance and security maturity.

The role focuses on implementing identity controls, overseeing Entra ID/Azure AD, SailPoint, and DLP technologies, and improving accountability across corporate and cloud environments. Location: San Jose, CA.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• 8+ years in cybersecurity, IAM, PAM, or data protection.
• 5+ years leading enterprise security programs and cross-functional projects.

Responsabilités

• Identity and Access Management – lead enterprise IAM strategy for workforce, privileged, service, app, vendor and non-human identities.
• Lead SailPoint identity governance capabilities including lifecycle, role management, access requests, certifications, and policy enforcement.
• Improve identity data quality, ownership, entitlement transparency, and deprovisioning across critical apps.
• Privileged Access Management – lead PAM program for admins, service accounts, emergency accounts, cloud admins and high-risk ids.
• Improve visibility for privileged activity across corporate, cloud, engineering, and production environments.
• Lead Data Loss Prevention and Information Protection strategy across endpoints, email, cloud, data repositories; define classifications and controls.
• Establish data classification, labeling, retention, encryption, sharing, and monitoring with stakeholders.
• Oversee incident triage, investigation, escalation, remediation for data loss and policy violations.
• Program Operations – governance meetings, action tracking, escalation, cross-functional follow-up.
• Develop and maintain security standards, runbooks, training materials; define SLAs and metrics.
• Identify opportunities to improve automation, data quality, and security maturity; build dashboards on key metrics.

Description du poste

About the Role

Altera is seeking an experienced Identity and Data Cyber Defense Lead to lead enterprise identity and access management, privileged access management, and data loss prevention programs. This role will strengthen security controls protecting corporate systems, sensitive semiconductor design data, source code, and intellectual property. The ideal candidate will drive security strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance, operational efficiency, and enterprise security maturity.

Responsibilities

• Identity and Access Management – Lead the enterprise identity and access management strategy across workforce, privileged, service, application, vendor, and non-human identities. Establish governance for identity lifecycle management, joiner-mover-leaver processes, authentication, authorization, access requests, and access reviews. Oversee Microsoft Entra ID/Azure AD capabilities, including conditional access, identity protection, privileged identity management, authentication methods, application registrations, and federation.
• Lead SailPoint identity governance capabilities, including identity lifecycle workflows, role management, access requests, access certifications, policy enforcement, and reporting.
• Improve identity data quality, ownership, entitlement transparency, and timely deprovisioning across critical applications and platforms. Partner with application, infrastructure, cloud, HR, and business teams to integrate identity controls into enterprise processes. Establish measurable improvements in orphaned-account reduction, access-request turnaround, deprovisioning timeliness, certification completion, and policy compliance.
• Privileged Access Management – Lead the enterprise privileged access management program for administrators, service accounts, emergency accounts, cloud administrators, and other high-risk identities. Define requirements for privileged account discovery, vaulting, credential rotation, session monitoring, just-in-time access, and break-glass controls. Partner with infrastructure, cloud, network, engineering, and IT teams to onboard critical privileged accounts and systems. Monitor privileged access exceptions, unresolved risks, control failures, and overdue remediation actions.
• Improve visibility and accountability for privileged activity across corporate, cloud, engineering, and production environments.
• Data Loss Prevention and Information Protection – Lead enterprise Data Loss Prevention and information protection strategy across endpoints, email, collaboration platforms, cloud services, applications, and data repositories. Define and implement controls for sensitive semiconductor design data, source code, engineering and design information, customer data, employee data, financial information, and intellectual property.
• Establish data classification, labeling, handling, retention, encryption, sharing, and monitoring requirements in partnership with Data Governance, Legal, Privacy, and business stakeholders. Develop and tune DLP policies to reduce data leakage while minimizing unnecessary business disruption and false positives.
• Oversee incident triage, investigation, escalation, and remediation for suspected data loss and policy violations. Measure improvements in sensitive-data discovery, labeling coverage, DLP policy effectiveness, incident resolution, and exception closure.
• Program Operations and Continuous Improvement – Establish governance meetings, operating rhythms, action tracking, escalation processes, and cross-functional follow-up.
• Develop and maintain security standards, procedures, runbooks, job aids, knowledge articles, and training materials. Define service-level expectations and performance measures for identity, device, and data security processes. Conduct periodic quality reviews of access records, certification outcomes, DLP alerts, endpoint coverage, control evidence, and remediation activity.
• Identify opportunities to improve automation, data quality, process efficiency, stakeholder adoption and security program maturity. Develop dashboards and reports covering: Access certification completion and exceptions; Privileged access coverage and risk; Identity lifecycle timeliness; Endpoint protection and compliance; DLP incidents and remediation; Sensitive-data classification and coverage; Audit and SOX/ITGC readiness; Open risks, issues, and remediation progress.

Salary Range

The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance. $149,100 - $215,925 USD

Qualifications

• Minimum Qualifications – Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 8+ years of experience in cybersecurity, identity and access management, privileged access management, or data protection.
• 5+ years of experience leading or managing enterprise security programs, initiatives, or cross-functional projects.
• Hands-on experience with Microsoft Entra ID/Azure AD, SailPoint, privileged access management, and data loss prevention technologies.
• Experience establishing security policies, governance processes, metrics, and compliance reporting.

Job Type

Regular

Shift

Shift 1 (United States of America)

Primary Location

San Jose, California, United States

Additional Locations

None

Posting Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation or any other characteristic protected by local law, regulation, or ordinance.

About Altera

Altera: Accelerating Innovators. Altera provides leadership programmable solutions that are easy-to-use and deploy in applications from cloud to edge, offering limitless AI possibilities. Our end-to-end broad portfolio of products including FPGAs, CPLDs, Intellectual Property, development tools, System on Modules, SmartNICs and IPUs provide the flexibility to accelerate innovation. Altera is helping to shape the future through pioneering innovation that unlocks extraordinary possibilities for everyone on the planet.