Identity and Data Cyber Defense Lead

About the role

Altera is seeking an experienced Identity and Data Cyber Defense Lead to lead enterprise identity and access management, privileged access management, and data loss prevention programs. This role will strengthen security controls protecting corporate systems, sensitive semiconductor design data, source code, and intellectual property. The ideal candidate will drive security strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance, operational efficiency, and enterprise security maturity.

Responsibilities

• Identity and Access Management: Lead enterprise IAM strategy across workforce, privileged, service, application, vendor, and non-human identities; establish governance for identity lifecycle, joiner-mover-leaver, authentication, authorization, access requests, reviews; oversee Microsoft Entra ID/Azure AD capabilities (conditional access, identity protection, privileged identity management, authentication methods, application registrations, federation); lead SailPoint identity governance (identity lifecycle workflows, role management, access requests, access certifications, policy enforcement, reporting); improve identity data quality, ownership, entitlement transparency, timely deprovisioning; partner with application, infrastructure, cloud, HR, business teams to integrate controls; establish measurable improvements in orphaned-account reduction, access-request turnaround, deprovisioning timeliness, certification completion, policy compliance.
• Privileged Access Management: Lead enterprise PAM program for administrators, service accounts, emergency accounts, cloud administrators, high-risk identities; define requirements for privileged account discovery, vaulting, credential rotation, session monitoring, just-in-time access, break-glass controls; partner with infrastructure, cloud, network, engineering, IT teams to onboard critical privileged accounts and systems; monitor privileged access exceptions, unresolved risks, control failures, overdue remediation; improve visibility and accountability for privileged activity across corporate, cloud, engineering, production environments.
• Data Loss Prevention and Information Protection: Lead enterprise DLP and info protection strategy across endpoints, email, collaboration platforms, cloud services, applications, data repositories; define and implement controls for sensitive semiconductor design data, source code, engineering/design info, customer data, employee data, financial info, IP; establish data classification, labeling, handling, retention, encryption, sharing, monitoring requirements with Data Governance, Legal, Privacy, business stakeholders; develop and tune DLP policies to reduce leakage while minimizing disruption and false positives; oversee incident triage, investigation, escalation, remediation for suspected data loss and policy violations; measure improvements in sensitive-data discovery, labeling coverage, DLP policy effectiveness, incident resolution, exception closure.
• Program Operations and Continuous Improvement: Establish governance meetings, operating rhythms, action tracking, escalation processes, cross-functional follow-up; develop and maintain security standards, procedures, runbooks, job aids, knowledge articles, training materials; define service-level expectations and performance measures for identity, device, data security processes; conduct periodic quality reviews of access records, certification outcomes, DLP alerts, endpoint coverage, control evidence, remediation activity; identify opportunities to improve automation, data quality, process efficiency, stakeholder adoption, security program maturity; develop dashboards and reports covering: access certification completion/exceptions, privileged access coverage/risk, identity lifecycle timeliness, endpoint protection/compliance, DLP incidents/remediation, sensitive-data classification/coverage, audit/SOX/ITGC readiness, open risks/issues/remediation progress.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 8+ years of experience in cybersecurity, identity and access management, privileged access management, or data protection.
• 5+ years of experience leading or managing enterprise security programs, initiatives, or cross-functional projects.
• Hands-on experience with Microsoft Entra ID/Azure AD, SailPoint, privileged access management, and data loss prevention technologies.
• Experience establishing security policies, governance processes, metrics, and compliance reporting.
• Applicants must be eligible for any required U.S. export authorizations.

Pay

$149,100 - $215,925 USD (Bay Area California only; actual salary may vary based on location, knowledge, skills, experience, training, etc.; incentive opportunities based on individual and company performance).

Schedule

Regular Shift, Shift 1 (United States of America).