Open-Source Software Compliance Coordinator
Company: A leading global MNC
Location: Bangalore, India
Experience: 4–6 Years
Open Positions: 1
Work Mode: Hybrid – Minimum 3 days in office per week
Notice Period: Maximum 15 Days
Team: Application Security (AppSec) Platform & Security Engineering
Job Summary
We are looking for an experienced Open-Source Software Compliance Coordinator to manage open-source licensing, software compliance, and Software Composition Analysis (SCA) activities. The candidate should have hands-on experience with SCA tools, license obligations, SBOM generation, and application security, along with robust communication skills.
Key Responsibilities
• Independently manage open-source software compliance activities across application delivery teams.
• Coordinate source code scans and analyze SCA scan results.
• Identify open-source components, licenses, and associated compliance risks.
• Support development teams in resolving license compliance issues and addressing open-source vulnerabilities.
• Review license terms, determine obligations,
and support risk acceptance workflows for non-compliant licenses.
• Generate and review Software Bill of Materials (SBOM).
• Perform package and snippet scanning to identify open-source components and potential code plagiarism.
• Use SCA tools such as Sonatype Lifecycle, Black Duck, Mend.io, FOSSID, or Revenera.
• Develop compliance training materials and educate teams on open-source license categories and obligations.
• Collaborate with application development, security, and leadership teams to improve compliance processes.
• Support DevSecOps transformation and standardization of open-source compliance practices.
• Communicate compliance status, risks, and recommendations to technical teams and management.
Mandatory Skills
• Minimum 4 years of hands-on open-source software compliance experience.
• Independent ownership of open-source licensing and compliance activities.
• Experience with at least one SCA to