Senior Business Systems Analyst – FOSS, SBOM

This is a fully remote position, open to applicants in Arizona, +2 more states.

📋 Description

• Create and uphold enterprise FOSS and SBOM policies, standards, procedures, and control requirements.

• Set up governance for SBOM generation, collection, validation, storage, maintenance, and utilization.

• Specify requirements for recognizing and managing risks associated with open-source licensing, security, vulnerabilities, operations, and supply chains.

• Define roles, responsibilities, approval authorities, and processes for exceptions and risk acceptance.

• Integrate FOSS/SBOM requirements into the Software Development Life Cycle (SDLC), DevSecOps, technology procurement, and third-party risk management processes.

• Establish governance metrics, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), compliance monitoring, and management reporting.

• Collaborate with stakeholders to promote adherence to standards and address any identified gaps.

• Stay informed about evolving industry practices and regulatory expectations, integrating them into the governance framework.

• Work alongside Technology, Cybersecurity, Legal, Compliance, Architecture, and Software Engineering teams.

⛳️ Requirements

• A Bachelor’s Degree and 6 years of experience OR a High School Diploma or GED/Equivalent with 10 years of experience in Systems Support, Analytics, or Operational Support.

• Strong comprehension of open-source software risk, software supply chain risk, SBOMs, vulnerability management, and secure SDLC practices.

• Proven experience in developing enterprise policies, standards, procedures, controls, and governance frameworks.

• Familiarity with SBOM concepts and standards like SPDX and CycloneDX.

• Knowledge of software composition analysis (SCA) capabilities.

• Ability to convert technical and risk concepts into clear, auditable requirements and control expectations.

• Excellent stakeholder management skills across Engineering, Cybersecurity, Risk, Legal, Compliance, and senior management.

• Experience in establishing a FOSS/SBOM governance program within a large, regulated enterprise or financial services environment.

• Preferred: Over 7 years of experience in technology risk, cybersecurity governance, software governance, application security, or related fields.

🏝️ Benefits

• Competitive, thoughtfully designed, and high-quality benefits program.

• Variable incentives, bonuses, benefits, and/or other awards may be included in total compensation.