Open Source Program Lead
Core
Design and develop an Enterprise Open Source Management Program and software supply chain security strategy for a client.
Role type
Senior individual contributor program lead (open source governance & supply chain security)
Builds
Enterprise open source governance operating model, software supply chain security strategy, SBOM processes, and policy frameworks
Domain
Cybersecurity, Software Engineering, DevSecOps, Life Sciences
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Open source governance, software supply chain security, DevSecOps, strategic planning, stakeholder management, policy development, SBOM strategy, cross-functional leadership, risk management, SDLC knowledge
Preferred skills
Executive communication, workshop facilitation, industry trend analysis, tooling evaluation, pilot implementation
Technologies
DevSecOps, DevOps, AI
Responsibilities
Lead design and development of an Enterprise Open Source Management Program including governance, operating model, scope, roadmap, and implementation strategy. Facilitate collaboration across Cyber Security, Software Engineering, DevOps, Asset Management, Architecture, and Risk Management teams. Partner with stakeholders to assess capabilities, identify gaps, and shape future-state processes for open source governance. Develop program proposals, business cases, staffing plans, budget estimates, and implementation roadmaps. Define enterprise processes for open source software intake, approval, exception handling, and ongoing governance. Create recommendations for policies, standards, controls, and procedures related to open source software management. Support development of an SBOM strategy and related processes. Facilitate proof-of-concept efforts and pilot implementations. Evaluate tooling capabilities and support technology assessments and vendor reviews. Work with development teams to understand software delivery workflows. Drive stakeholder alignment through workshops, working groups, governance forums, and executive discussions. Monitor industry trends, emerging threats, and regulatory changes. Develop educational materials and guidance to support program adoption.
Seniority
Senior, hands-on IC