OSPO Lead: Open Source Strategy & Governance

M&T Bank; United States; Remote; USD 116,000 - 194,000; Full time

Job summary

M&T Bank is seeking a senior leader to establish and advance the enterprise Open Source Program Office (OSPO) strategy, governance, and operating model. You will enable responsible OSS use, SBOM practices, and software-supply-chain governance across engineering, security, legal, risk, and architecture teams.

You will partner with Cyber Security and Legal to implement standards, licenses, and exception processes while maturing InnerSource and developer enablement across the organization.

Qualifications

• Demonstrated experience developing or operating an Open Source Program Office or comparable governance.
• Experience defining standards, governance models, and cross-functional forums.
• Knowledge of SBOM standards and formats (CycloneDX, SPDX).
• Experience with Software Composition Analysis (SCA) and vulnerability workflows.
• Ability to translate complex risk/tech topics into actionable guidance.

Responsibilities

• Lead OSPO strategy, governance framework, and operating model.
• Define license and contribution guidance for open-source usage.
• Partner with Cyber Security on SBOM, SCA, and risk controls.
• Provide governance across lifecycle of open-source components.
• Mentor engineers and leaders on open-source governance and practices.

Skills

Open Source Governance

SBOM

DevSecOps

Cyber Security

Leadership

Software Supply-Chain

Regulatory & Risk

Tools

GitLab

JFrog Artifactory

SCA

SonarQube

Mend

Job description

M&T Bank is seeking a senior leader to establish and advance the enterprise Open Source Program Office (OSPO) strategy, governance, and operating model. You will enable responsible OSS use, SBOM practices, and software-supply-chain governance across engineering, security, legal, risk, and architecture teams.

You will partner with Cyber Security and Legal to implement standards, licenses, and exception processes while maturing InnerSource and developer enablement across the organization.