Senior Open Source & Software Supply Chain Leader (Remote)

Strategic Data Systems, Inc.; Cincinnati (OH); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Medical, dental, and vision insurance

401(k) with company match

Paid vacation time

Paid bench time

Training allowance

Referral bonuses

Job summary

Strategic Data Systems in Cincinnati is seeking a Senior Product Owner IV to lead enterprise open source governance and software supply chain security initiatives on a remote-friendly contract basis. You will partner across Cyber Security, Software Engineering, DevOps, and Risk to define the operating model, roadmap, and governance framework.

The ideal candidate possesses 5+ years in cybersecurity, strong communication, and the ability to drive outcomes through influence in a matrixed

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business, or a related field, or equivalent combination of education and experience.
• 5+ years of experience in cybersecurity, application security, software development, technology governance, software supply chain security, DevSecOps, or related disciplines.
• Experience leading complex cross-functional initiatives involving multiple stakeholder groups and competing priorities.
• Demonstrated ability to operate effectively in ambiguous environments and transform high-level objectives into actionable implementation plans.
• Strong written and verbal communication skills, including experience developing executive presentations, business cases, and strategic recommendations.
• Ability to influence outcomes and drive decisions across organizations without direct management authority.
• Understanding of SDLC practices and modern software delivery methodologies.

Responsibilities

• Lead the design and development of an Enterprise Open Source Management Program, including governance, operating model, scope, roadmap, and implementation strategy.
• Facilitate collaboration among Cyber Security, Software Engineering, DevOps, Asset Management, Architecture, Risk Management, and related teams to establish program requirements and priorities.
• Partner with stakeholders to evaluate current-state capabilities, identify gaps, and define future-state processes supporting open source governance and software supply chain security.
• Develop program proposals, business cases, staffing plans, budget estimates, and implementation roadmaps for executive review and approval.
• Define enterprise processes for open source software intake, approval, exception management, and ongoing governance activities.
• Develop recommendations for policies, standards, controls, and supporting procedures related to open source software management and software supply chain risk.
• Support development of a SBOM strategy and associated processes that improve visibility into software components, dependencies, and associated risks.
• Facilitate proof-of-concept activities and pilot implementations that validate proposed processes, technologies, and operating models.
• Evaluate tooling capabilities and assist with technology assessments, vendor reviews, and solution recommendations that support program objectives.
• Partner with development teams to understand software development workflows and ensure program recommendations can be effectively integrated into existing engineering practices.
• Drive stakeholder alignment by facilitating workshops, working groups, governance forums, and executive-level discussions.
• Provide transparency and ongoing communications regarding program status, strategic recommendations, risks, dependencies, and milestones.
• Monitor industry trends, emerging threats, regulatory developments, and leading practices associated with open source software governance and software supply chain security.
• Develop educational materials, guidance, and communication artifacts that support adoption of program principles and expectations throughout the organization.
• Influence outcomes and drive decision-making without direct authority across highly matrixed teams and organizations.

Skills

Enterprise change management

Influence/coordination across orgs

Program design

Software supply chain security

SBOM concepts

SDLC practices

GitHub/Jenkins/Artifactory

Cloud environments

Stakeholder management

Requirements gathering

Executive communications

Roadmap development

Budgeting and staffing planning

Cross-functional leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business, or a related field

Tools

OSPO experience

Open source policy development

Software Composition Analysis (SCA) tools

ServiceNow

Vulnerability management

Container registries

DevSecOps

Secure SDLC frameworks

Exception management

Vendor assessments

Regulatory & compliance environments

Job description

Strategic Data Systems in Cincinnati is seeking a Senior Product Owner IV to lead enterprise open source governance and software supply chain security initiatives on a remote-friendly contract basis. You will partner across Cyber Security, Software Engineering, DevOps, and Risk to define the operating model, roadmap, and governance framework.

The ideal candidate possesses 5+ years in cybersecurity, strong communication, and the ability to drive outcomes through influence in a matrixed