Senior OSPO Leader: Open Source Governance & Security

M&T Bank Corporation; Clanton (AL); À distance; USD 116 000 - 194 000; Plein temps

Résumé du poste

M&T Bank Corporation is seeking a senior leader to establish and advance the enterprise Open Source Program Office (OSPO) strategy, governance, and operating model. You will enable responsible OSS use across the software lifecycle, partnering with Cyber Security, Legal, and Engineering to ensure SBOM, SCA, and risk practices are embedded in pipelines.

You will coach engineers and leaders, define ownership and escalation paths, and drive continuous improvement across governance and lifecycle

Qualifications

• Proven experience building or operating an Open Source Program Office.
• Experience with software supply-chain security and governance frameworks.
• Ability to translate technical risk into actionable guidance for engineering teams.

Responsabilités

• Lead OSPO strategy, governance, and operating model.
• Define standards for consuming, distributing, and contributing to OSS.
• Partner with Cyber Security, Legal, Risk, and Engineering.
• Embed governance into development workflows and CI/CD.
• Develop SBOM governance and lifecycle practices.

Connaissances

Open Source governance

Software supply-chain

SBOM (Software Bill of Materials)

SCA (Software Composition Analysis)

DevSecOps

Risk management

Cyber Security collaboration

Engineering governance

Policy & standards

Technical leadership

Formation

Bachelor's degree or higher in a relevant field

7+ years software/architecture experience

Leadership experience

Outils

GitLab

JFrog Artifactory

SonarQube

CI/CD tooling

Description du poste

M&T Bank Corporation is seeking a senior leader to establish and advance the enterprise Open Source Program Office (OSPO) strategy, governance, and operating model. You will enable responsible OSS use across the software lifecycle, partnering with Cyber Security, Legal, and Engineering to ensure SBOM, SCA, and risk practices are embedded in pipelines.

You will coach engineers and leaders, define ownership and escalation paths, and drive continuous improvement across governance and lifecycle