Open Source Program Lead

Salary: $176,800 - 197,600 per year Requirements: We require at least 5 years of experience in cybersecurity, application security, software development, technology governance, software supply chain security, DevSecOps, or a related discipline. We look for experience leading complex cross-functional initiatives with multiple stakeholder groups and competing priorities. We need someone who can work effectively in ambiguous environments and turn strategic goals into practical implementation plans. We require strong written and verbal communication skills, including executive presentations, business cases, and strategic recommendations. We need the ability to influence outcomes and drive decisions without direct management authority. We value understanding of SDLC practices and modern software delivery methodologies. We require a bachelors degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business, or a related field, or an equivalent combination of education and experience. Responsibilities: We lead the design and development of an Enterprise Open Source Management Program, including governance, operating model, scope, roadmap, and implementation strategy. We facilitate collaboration across Cyber Security, Software Engineering, DevOps, Asset Management, Architecture, Risk Management, and related teams to define program priorities and requirements. We partner with stakeholders to assess current capabilities, identify gaps, and shape future-state processes that support open source governance and software supply chain security. We develop program proposals, business cases, staffing plans, budget estimates, and implementation roadmaps for executive review and approval. We define enterprise processes for open source software intake, approval, exception handling, and ongoing governance. We create recommendations for policies, standards, controls, and procedures related to open source software management and software supply chain risk. We support development of an SBOM strategy and related processes that improve visibility into software components, dependencies, and risks. We facilitate proof-of-concept efforts and pilot implementations to validate proposed processes, technologies, and operating models. We evaluate tooling capabilities and support technology assessments, vendor reviews, and solution recommendations aligned to program goals. We work with development teams to understand software delivery workflows and ensure our recommendations fit existing engineering practices. We drive stakeholder alignment through workshops, working groups, governance forums, and executive discussions. We provide clear communication on program status, strategic recommendations, risks, dependencies, and milestones. We monitor industry trends, emerging threats, regulatory changes, and leading practices related to open source governance and software supply chain security. We develop educational materials, guidance, and communications that support adoption of program principles and expectations across the organization. We influence outcomes and decisions across highly matrixed teams without direct authority. Technologies: DevSecOps DevOps Support Security AI More: We are a strategic consulting firm helping organizations reach further and achieve more through technology, business advisory, and life sciences solutions. This remote opportunity is a senior individual contributor role focused on designing and planning an enterprise open source management program and software supply chain security strategy for our client. We offer W2 employment with a benefits package that includes medical, dental, vision, 401(k) with company match, and life insurance. We are committed to building a diverse and inclusive team and to making a positive impact on our employees, clients, consultants, and communities. last updated 37 week of 2026