FOSS & SBOM Governance Lead

First Citizens; Trenton (NJ); Hybrid; USD 111,000 - 170,000; Full time

Benefits offered by this job

Remote eligible

Job summary

First Citizens Bank in New Jersey seeks a senior governance leader to establish and manage enterprise FOSS and SBOM policies across the SDLC. You will define standards, ownership, and risk-based controls, partnering with Legal, Compliance, and Security teams.

The role requires 7+ years in technology risk or cybersecurity governance, with experience in SBOM concepts (SPDX/CycloneDX) and policy development. Remote eligibility is available.

Qualifications

• Bachelor's degree and 6 years' experience in Systems Support, Analytics, or Operational Support.
• Or, High School Diploma or GED with 10 years' experience in Systems Support, Analytics, or Operational Support.
• Experience in technology risk and cybersecurity governance.
• Knowledge of open-source risk, SBOM concepts, and secure SDLC practices.

Responsibilities

• Develop and maintain enterprise FOSS and SBOM policies, standards, procedures, and control requirements.
• Establish governance for SBOM generation, collection, validation, storage, maintenance, and consumption.
• Define requirements for identifying and managing open-source licensing, security, vulnerability, operational, and supply-chain risks.
• Establish roles, responsibilities, approval authorities, and exception/risk-acceptance processes.
• Integrate FOSS/SBOM requirements into the SDLC, DevSecOps, technology procurement, and third-party risk processes.
• Define governance metrics, KRIs/KPIs, compliance monitoring, and management reporting.
• Partner with stakeholders to drive adoption and remediate gaps against established standards.
• Monitor evolving industry practices and regulatory expectations and incorporate them into the governance framework.

Skills

FOSS governance

SBOM governance

Risk management

Policy development

Cybersecurity governance

Education

Bachelor's degree in a related field

High School Diploma or GED

Tools

SPDX

CycloneDX

SCA tools

Job description

First Citizens Bank in New Jersey seeks a senior governance leader to establish and manage enterprise FOSS and SBOM policies across the SDLC. You will define standards, ownership, and risk-based controls, partnering with Legal, Compliance, and Security teams.

The role requires 7+ years in technology risk or cybersecurity governance, with experience in SBOM concepts (SPDX/CycloneDX) and policy development. Remote eligibility is available.