SBOM License Compliance Analyst

Responsibilities

• Lead enterprise-wide analysis of automated SBOM outputs to identify and catalog Open-Source Software (OSS) components
• Evaluate complex license profiles, copyleft obligations, and dual-licensing risks against regulatory requirements
• Design remediation pathways for the Business Solution Group to resolve high-risk license conflicts
• Coordinate with Legal, Procurement, and security units on remediation and escalations
• Architect and update internal OSS governance policies in alignment with RBI-CERT-IN Guidelines
• Serve as the primary subject matter expert for OSS compliance during internal, external, and regulatory audits

Requirements

• 5+ years of software license compliance or IT audit experience in banking, fintech, or regulated financial environments
• Deep understanding of OSS licenses including AGPL, GPL, Apache, and MIT
• Extensive hands-on experience with Enterprise Software Composition Analysis (SCA) and SBOM management tools
• Familiarity with regulatory requirements and compliance frameworks
• Proven ability to advise technical teams and provide updates to top management

Preferred Qualifications

• OpenChain certification
• CISA certification
• CISSP certification

Benefits

• Flat hierarchy and collaborative environment
• Flexible work hours
• Dynamic and inclusive culture
• Structured career development and mentorship opportunities

About the Company

Established in 2018, CyberNX Technologies is an innovative cybersecurity firm based in Mumbai, India. The team offers a full range of cybersecurity and cloud services, dedicated to facilitating secure digital transformation.