SBOM & Open Source Compliance Analyst

Eliassen Group; United States; Remote; USD 83,000 - 102,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k with company matching

Life insurance

Job summary

Eliassen Group seeks a Software Asset Management Analyst – SBOM & Open Source Compliance to join our SAM team in the United States. This role supports and advances SBOM programs, software compliance initiatives, licensing, and lifecycle governance.

You will partner with Development, DevSecOps, Cybersecurity, Legal, Procurement, Vendor Management, and Risk teams to improve visibility into software components, licensing obligations, vulnerabilities, and compliance requirements across the

Qualifications

• 3+ years in SAM/ITAM or related field.
• Strong SBOM and software supply chain knowledge.
• Familiarity with open-source licensing and compliance.
• Experience with package ecosystems: npm, Maven, PyPI, NuGet, and container environments.
• Ability to reconcile data across systems and communicate findings.

Responsibilities

• Support and advance SBOM program and open-source compliance.
• Collaborate with cross-functional teams to improve visibility into software components and licensing.
• Assist in software lifecycle management, discovery, normalization, entitlement management, and compliance analysis.

Skills

Software Asset Management

SBOM

Open Source Licensing

Data Reconciliation

Education

Bachelor's degree in Computer Science or related field

Tools

npm

Maven

PyPI

NuGet

Containers (Docker/Kubernetes)

Job description

Eliassen Group seeks a Software Asset Management Analyst – SBOM & Open Source Compliance to join our SAM team in the United States. This role supports and advances SBOM programs, software compliance initiatives, licensing, and lifecycle governance.

You will partner with Development, DevSecOps, Cybersecurity, Legal, Procurement, Vendor Management, and Risk teams to improve visibility into software components, licensing obligations, vulnerabilities, and compliance requirements across the