FOSS & SBOM Governance Lead (Remote)

First Citizens Bank; Trenton (NJ); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote eligible

Job summary

First Citizens Bank seeks a senior governance professional to establish and run the enterprise framework for Free and Open Source Software (FOSS) and Software Bills of Materials (SBOMs) across the software development lifecycle.

The role partners with Technology, Cybersecurity, Legal, Compliance, Architecture, and Software Engineering to define clear ownership, risk-based requirements, exception processes, and ongoing monitoring practices. Remote eligible.

Qualifications

• Strong understanding of open-source software risk, software supply-chain risk, SBOMs, vulnerability management, and secure SDLC practices.
• Experience developing enterprise policies, standards, procedures, controls, and governance frameworks.
• Ability to translate technical and risk concepts into clear, auditable requirements and control expectations.

Responsibilities

• Develop and maintain enterprise FOSS and SBOM policies, standards, procedures, and control requirements.
• Establish governance for SBOM generation, collection, validation, storage, maintenance, and consumption.
• Define requirements for identifying and managing open-source licensing, security, vulnerability, operational, and supply-chain risks.
• Establish roles, responsibilities, approval authorities, and exception/risk-acceptance processes.
• Integrate FOSS/SBOM requirements into the SDLC, DevSecOps, technology procurement, and third-party risk processes.
• Define governance metrics, KRIs/KPIs, compliance monitoring, and management reporting.
• Partner with stakeholders to drive adoption and remediate gaps against established standards.
• Monitor evolving industry practices and regulatory expectations and incorporate them into the governance framework.

Skills

Stakeholder management

Risk governance

Open-source risk

Auditable requirements translation

Education

Bachelor's Degree

High School Diploma or GED/Equivalent with 10 years experience

Tools

SPDX

CycloneDX

SCA capabilities

Job description

First Citizens Bank seeks a senior governance professional to establish and run the enterprise framework for Free and Open Source Software (FOSS) and Software Bills of Materials (SBOMs) across the software development lifecycle.

The role partners with Technology, Cybersecurity, Legal, Compliance, Architecture, and Software Engineering to define clear ownership, risk-based requirements, exception processes, and ongoing monitoring practices. Remote eligible.