> Markdown version of [/jobs/ext/3814530-identity-and-data-cyber-defense-lead](https://www.wearedevelopers.com/jobs/ext/3814530-identity-and-data-cyber-defense-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity and Data Cyber Defense Lead

- **Company:** Altera Corporation
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Salary:** $149,100.0 - $215,925.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Collaborative Software, Cyber Security, Customer Data Management, Data Discovery, Data Governance, Information Leak Prevention, Data Loss, Data Security, Data Stores, Identity and Access Management, Azure Active Directory, Cloud Services, Runbook, Data Classification, Information Technology, SailPoint, Cyber Warfare
- **Published:** October 18, 2026
- **Apply:** https://www.dice.com/job-detail/a0e97444-4384-4d76-8191-07080842530f

## About the Role

* Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
 * 8+ years of experience in cybersecurity, identity and access management, privileged access management, or data protection.
 * 5+ years of experience leading or managing enterprise security programs, initiatives, or cross-functional projects.
 * Hands-on experience with Microsoft Entra ID/Azure AD, SailPoint, privileged access management, and data loss prevention technologies.
 * Experience establishing security policies, governance processes, metrics, and compliance reporting.

## Description

Altera is seeking an experienced Identity and Data Cyber Defense Lead to lead enterprise identity and access management, privileged access management, and data loss prevention programs. This role will strengthen security controls protecting corporate systems, sensitive semiconductor design data, source code, and intellectual property. The ideal candidate will drive security strategy, governance, risk reduction, and continuous improvement while partnering with cross-functional teams to enhance compliance, operational efficiency, and enterprise security maturity., Identity and Access Management

 * Lead the enterprise identity and access management strategy across workforce, privileged, service, application, vendor, and non-human identities.

 * Establish governance for identity lifecycle management, joiner-mover-leaver processes, authentication, authorization, access requests, and access reviews.

 * Oversee Microsoft Entra ID/Azure AD capabilities, including conditional access, identity protection, privileged identity management, authentication methods, application registrations, and federation.

 * Lead SailPoint identity governance capabilities, including identity lifecycle workflows, role management, access requests, access certifications, policy enforcement, and reporting.

 * Improve identity data quality, ownership, entitlement transparency, and timely deprovisioning across critical applications and platforms.

 * Partner with application, infrastructure, cloud, HR, and business teams to integrate identity controls into enterprise processes.

 * Establish measurable improvements in orphaned-account reduction, access-request turnaround, deprovisioning timeliness, certification completion, and policy compliance.

Privileged Access Management

 * Lead the enterprise privileged access management program for administrators, service accounts, emergency accounts, cloud administrators, and other high-risk identities.

 * Define requirements for privileged account discovery, vaulting, credential rotation, session monitoring, just-in-time access, and break-glass controls.

 * Partner with infrastructure, cloud, network, engineering, and IT teams to onboard critical privileged accounts and systems.

 * Monitor privileged access exceptions, unresolved risks, control failures, and overdue remediation actions.

 * Improve visibility and accountability for privileged activity across corporate, cloud, engineering, and production environments.

Data Loss Prevention and Information Protection

 * Lead enterprise Data Loss Prevention and information protection strategy across endpoints, email, collaboration platforms, cloud services, applications, and data repositories.

 * Define and implement controls for sensitive semiconductor design data, source code, engineering and design information, customer data, employee data, financial information, and intellectual property.

 * Establish data classification, labeling, handling, retention, encryption, sharing, and monitoring requirements in partnership with Data Governance, Legal, Privacy, and business stakeholders.

 * Develop and tune DLP policies to reduce data leakage while minimizing unnecessary business disruption and false positives.

 * Oversee incident triage, investigation, escalation, and remediation for suspected data loss and policy violations.

 * Measure improvements in sensitive-data discovery, labeling coverage, DLP policy effectiveness, incident resolution, and exception closure.

Program Operations and Continuous Improvement

 * Establish governance meetings, operating rhythms, action tracking, escalation processes, and cross-functional follow-up.

 * Develop and maintain security standards, procedures, runbooks, job aids, knowledge articles, and training materials.

 * Define service-level expectations and performance measures for identity, device, and data security processes.

 * Conduct periodic quality reviews of access records, certification outcomes, DLP alerts, endpoint coverage, control evidence, and remediation activity.

 * Identify opportunities to improve automation, data quality, process efficiency, stakeholder adoption, and security program maturity.

 * Develop dashboards and reports covering:

 * Access certification completion and exceptions

 * Privileged access coverage and risk

 * Identity lifecycle timeliness

 * Endpoint protection and compliance