Senior Business Systems Analyst – FOSS, SBOM

First Citizens Bank

. Develop and maintain enterprise FOSS and SBOM policies, standards, procedures, and control requirements .

Posted 11/2/2026full-timeRemote • United StatesSenior💰 $111,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining enterprise FOSS and SBOM policies, governance frameworks, and compliance monitoring. Proficient in stakeholder management and integrating risk management practices into the software development lifecycle.

Highest-signal resume keywords

Open-Source Software Risk ManagementSBOM Governance Program DevelopmentSoftware Composition Analysis (SCA)Stakeholder ManagementSecure SDLC Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Enterprise Policy DevelopmentGovernance FrameworksVulnerability ManagementSBOM ConceptsRisk AssessmentControl RequirementsCompliance MonitoringMetrics DefinitionTechnical Requirement TranslationGovernance Metrics

Soft Skills

Stakeholder ManagementCommunication SkillsCollaboration

Tools & Technologies

SPDXCycloneDXDevSecOps

Industry Keywords

FOSSSBOMSoftware Supply-Chain RiskCybersecurity GovernanceRegulated EnterpriseFinancial Services

Tech Stack

Tools & technologies

Cyber SecuritySDLC

About the role

Key responsibilities & impact

Develop and maintain enterprise FOSS and SBOM policies, standards, procedures, and control requirements
Establish governance for SBOM generation, collection, validation, storage, maintenance, and consumption
Define requirements for identifying and managing open-source licensing, security, vulnerability, operational, and supply-chain risks
Establish roles, responsibilities, approval authorities, and exception/risk-acceptance processes
Integrate FOSS/SBOM requirements into the SDLC, DevSecOps, technology procurement, and third-party risk processes
Define governance metrics, KRIs/KPIs, compliance monitoring, and management reporting
Partner with stakeholders to drive adoption and remediate gaps against established standards
Monitor evolving industry practices and regulatory expectations and incorporate them into the governance framework
Partner with Technology, Cybersecurity, Legal, Compliance, Architecture, and Software Engineering teams

Requirements

What you’ll need

Bachelor's Degree and 6 years' experience OR High School Diploma or GED/Equivalent and 10 years' experience in Systems Support, Analytics, or Operational Support
Strong understanding of open-source software risk, software supply-chain risk, SBOMs, vulnerability management, and secure SDLC practices
Demonstrated experience developing enterprise policies, standards, procedures, controls, and governance frameworks
Working knowledge of SBOM concepts and standards such as SPDX and CycloneDX
Knowledge of software composition analysis (SCA) capabilities
Ability to translate technical and risk concepts into clear, auditable requirements and control expectations
Strong stakeholder management skills across Engineering, Cybersecurity, Risk, Legal, Compliance, and senior management
Experience establishing a FOSS/SBOM governance program in a large, regulated enterprise or financial-services environment
Preferred: 7+ years of experience in technology risk, cybersecurity governance, software governance, application security, or related disciplines

Benefits

Comp & perks

Competitive, thoughtfully designed and quality benefits program
Variable incentives, bonuses, benefits, and/or other awards may be included in total compensation