CyberNX- SBOM License Compliance Analyst

Job Description : SBOM License Compliance Analyst

Location: Mumbai

Experience: 5+ Years.

Company overview:

Established in 2018, CyberNX Technologies is an innovative cybersecurity firm based in

Mumbai, India. Our dynamic team, blending seasoned expertise with a modern, cloud-centric

mindset, offers a full range of cybersecurity and cloud services. We are dedicated to facilitating

secure digital transformation, working hand-in-hand with clients to embed information security

into the foundation of their organizations. Our mission is to deliver cutting-edge cybersecurity

solutions and services at competitive prices, ensuring our clients are well-protected against

emerging threats.

Role overview:

A Senior License Compliance Analyst to lead Software Bill of Materials (SBOM) risk

management operations. This senior role shall govern the legal and regulatory compliance of

open-source software (OSS) utilized across our enterprise business applications. The role shall

bridge the gap between legal, procurement, business solutioning and security, to mitigate third-

party risk.

Key Responsibilities:

 Lead SBOM Governance: Drive enterprise-wide analysis of automated SBOM

outputs to identify and catalog Open-Source Software (OSS) components across

critical banking applications.

 Risk Architecture: Evaluate complex license profiles, copyleft obligations, and dual-

licensing risks against regulatory requirements.

 Remediation Lead: Design remediation pathways for Business Solution Group to

resolve high-risk license conflicts.

 Coordination Lead: Coordinate internally with Legal, Procurement and security units

on remediation, escalations and apprise top management on periodic basis.

 Policy & Framework Design: Architect and update the bank’s internal OSS

governance policies, ensuring alignment with RBI-CERT-IN Guideline.

 Regulatory Compliance & Audit: Serve as the primary subject matter expert for OSS

compliance during internal, external, and regulatory audits.

Qualification/Requirements:

 Industry Experience: 5+ years of software license compliance or IT audit experience

specifically within banking, fintech, or highly regulated financial environments.

 Expert License Knowledge: Deep understanding of OSS licenses (e.g., AGPL, GPL,

Apache, MIT), patents, copyleft risks, and license compatibility constraints.

 Advanced Tooling Mastery: Extensive hands-on experience with Enterprise Software

Composition Analysis (SCA) and SBOM management tools.

 Regulatory Acumen: Familiarity with Regulatory requirements

 Stakeholder Management: Proven ability to advise solutions team on technical

compliance strategies along with top management updates.

 Certifications: Specific certifications such as OpenChain, CISA, or CISSP will be an

added advantage.

Benefits:

 Flat Hierarchy: Enjoy a collaborative environment where every voice matters.

 Flexible Work Hours: Tailor your schedule to fit your lifestyle and enhance work-

life balance.

 Dynamic Team: Join a vibrant, forward-thinking group of young professionals.

 Inclusive Culture: Experience an open and supportive work atmosphere that

encourages creativity.

 Career Development: Benefit from structured career paths that align with your goals.

 Mentorship Opportunities: Receive guidance and support from experienced mentors

to help you grow.

Note: This job description is a general outline of the role's responsibilities and may be adjusted

to suit the needs of the organization.