Senior Business Systems Analyst - FOSS/ SBOM (Remote)
About The Position
Responsible for establishing and managing the enterprise governance framework for Free and Open Source Software (FOSS) and Software Bills of Materials (SBOM). This role will develop standards, policies, procedures, and control requirements governing the use, identification, inventory, and risk management of open-source and third-party software components across the software development lifecycle. The role will partner with Technology, Cybersecurity, Legal, Compliance, Architecture, and Software Engineering teams to define clear ownership, risk-based requirements, exception processes, and ongoing monitoring practices. Remote eligible.
Requirements
- Bachelor's Degree and 6 years' experience OR High School Diploma or GED/Equivalent and 10 years' experience in Systems Support, or Analytics, or Operational Support
Nice To Haves
- 7+ years of experience in technology risk, cybersecurity governance, software governance, application security, or related disciplines.
- Strong understanding of open-source software risk, software supply-chain risk, SBOMs, vulnerability management, and secure SDLC practices.
- Demonstrated experience developing enterprise policies, standards, procedures, controls, and governance frameworks.
- Working knowledge of SBOM concepts and standards such as SPDX and CycloneDX, and software composition analysis (SCA) capabilities.
- Ability to translate technical and risk concepts into clear, auditable requirements and control expectations.
- Strong stakeholder management skills with the ability to work across Engineering, Cybersecurity, Risk, Legal, Compliance, and senior management.
- Experience establishing a FOSS/SBOM governance program in a large, regulated enterprise or financial-services environment.
Responsibilities
- Develop and maintain enterprise FOSS and SBOM policies, standards, procedures, and control requirements.
- Establish governance for SBOM generation, collection, validation, storage, maintenance, and consumption.
- Define requirements for identifying and managing open-source licensing, security, vulnerability, operational, and supply-chain risks.
- Establish roles, responsibilities, approval authorities, and exception/risk-acceptance processes.
- Integrate FOSS/SBOM requirements into the SDLC, DevSecOps, technology procurement, and third-party risk processes.
- Define governance metrics, KRIs/KPIs, compliance monitoring, and management reporting.
- Partner with stakeholders to drive adoption and remediate gaps against established standards.
- Monitor evolving industry practices and regulatory expectations and incorporate them into the governance framework.
Benefits
- Competitive, thoughtfully designed and quality benefits program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
