CDIBengaluru, Karnataka, India
Open-Source Software Compliance Coordinator - Volvo India - Bengaluru - Immediate
Sur site
Volvo Group in India, with a strong presence in Bengaluru, plays a key role in the company’s global mission to deliver sustainable, safe, and efficient transport solutions. Bengaluru serves as a major hub for Volvo’s digital, engineering, and business operations, housing teams that work on cutting-edge technologies across areas like application security, DevSecOps, connectivity, automation, and data-driven services.
From this location, Volvo’s Digital Technology and Operations organization supports global products and platforms used across the Volvo Group, collaborating closely with teams in more than 30 countries. The Bengaluru hub is known for its diverse, inclusive, and collaborative culture, where employees are encouraged to innovate, take ownership, and contribute to solutions that impact transport and infrastructure worldwide. Working at Volvo India in Bengaluru means being part of a global organization of nearly 100,000 people, all united by a strong culture of care, sustainability, and empowerment, and focused on leaving society in better shape for future generations.
Role Description
We are looking for a Professional Open-Source Compliance Coordinator to join our Open-Source Compliance Team within AppSec Platform & Security Engineering. We are looking for someone who has a real interest and passion for Open-Source Software Compliance and has a good technical background in application security, especially Software Composition Analysis. Your ability to learn new things, to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore, India, and follows a hybrid working model. The expectation is to work from the office at least 3 days per week (especially during the onboarding), with the remaining days working remotely. The specific days are flexible and can be agreed upon based on what works best for you and the team.
You will:
• Work with the delivery teams on results of Software Composition Analysis scans.
• Provide auditors ‘expertise and know-how to Application delivery teams that use Open- Source software in 2000+ Applications
• Drive all Open-Source Compliance activities
• Collaborate with Open-Source Software Program Lead to solidify Open-Source Software Compliance in Volvo.
• Coordinate source code scans
• Contribute to development and implementation of compliance training and education materials.
• Drive improvements in DevSecOps Transformations in relation to open-source compliance.
• Use tools like Sonatype lifecycle to identify the OSS used to develop a software product, as well as identifying open-source licenses.
• Support teams out in the Volvo organization in how to analyse, assess, and respond to various internet threats in the open-source domain.
Who are you?
Your experience:
• You have 4 - 5 years of experience with Open-Source software compliance
• You are a strong communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability.
You already:
• Have the ability to read and understand open source and commercial license terms and conditions.
• Have the ability to derive an understanding of license obligations.
• High level understanding of Risk acceptance and workflow in case of non-compliant licenses.
• Posses knowledge in understanding working flow for any of the popular programming language(s)and scripting language(s) to understand and identify plagiarism of code or logic.
• Should have working knowledge of using any of the SCA tools (Blackduck, Sonatype Lifecycle, MendIO, Revenera codeinsight, FOSSID).
• Should possess understanding of SCA package scanning and snippet scanning
• Should be able to explain and train teams on different categories of open-source licenses.
• Should be able to identify origin open-source of code/package.
• Working knowledge of SBOM generation and review of data within it.
• Clear written communication and oration skills.
• A desire to scale security through education and compliance.
The candidate needs to have at least 4 years of hands-on experience in open-source licensing and compliance, with the ability to work independently and take ownership of these responsibilities.
It is an advantage to have:
• Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture.
• Experience with CI/CD pipelines.
• As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements.
• Experience with security maturity models frameworks like OWASP SAMM or BSIMM.
• Experience analyzing and improving products and software security at scale.
• Experience in implementing application security testing processes & tools.
• Aware of Cyber Resilience Act (CRA) activities in EU or similar regulations across the world.
What´s in it for you?
• Application security is an area of growing importance. While we can´t offer you an effortless job, we can offer you a chance to be part of an exciting, growing and evolving domain.
• We are ready to help you develop and gain experience in areas you need to be a successful Open-Source Compliance Coordinator.
• Our team is fun to work with, diverse and we are all passionate about developing, supporting and helping others in many aspects of software development.
Informations de la mission :
From this location, Volvo’s Digital Technology and Operations organization supports global products and platforms used across the Volvo Group, collaborating closely with teams in more than 30 countries. The Bengaluru hub is known for its diverse, inclusive, and collaborative culture, where employees are encouraged to innovate, take ownership, and contribute to solutions that impact transport and infrastructure worldwide. Working at Volvo India in Bengaluru means being part of a global organization of nearly 100,000 people, all united by a strong culture of care, sustainability, and empowerment, and focused on leaving society in better shape for future generations.
Role Description
We are looking for a Professional Open-Source Compliance Coordinator to join our Open-Source Compliance Team within AppSec Platform & Security Engineering. We are looking for someone who has a real interest and passion for Open-Source Software Compliance and has a good technical background in application security, especially Software Composition Analysis. Your ability to learn new things, to inspire others around you and your excellent communication skills may be just what we are looking for. This position is based in Bangalore, India, and follows a hybrid working model. The expectation is to work from the office at least 3 days per week (especially during the onboarding), with the remaining days working remotely. The specific days are flexible and can be agreed upon based on what works best for you and the team.
You will:
• Work with the delivery teams on results of Software Composition Analysis scans.
• Provide auditors ‘expertise and know-how to Application delivery teams that use Open- Source software in 2000+ Applications
• Drive all Open-Source Compliance activities
• Collaborate with Open-Source Software Program Lead to solidify Open-Source Software Compliance in Volvo.
• Coordinate source code scans
• Contribute to development and implementation of compliance training and education materials.
• Drive improvements in DevSecOps Transformations in relation to open-source compliance.
• Use tools like Sonatype lifecycle to identify the OSS used to develop a software product, as well as identifying open-source licenses.
• Support teams out in the Volvo organization in how to analyse, assess, and respond to various internet threats in the open-source domain.
Who are you?
Your experience:
• You have 4 - 5 years of experience with Open-Source software compliance
• You are a strong communicator that is comfortable working both close to development teams as well as report and inform upper management on the status of open source compliance and vulnerability.
You already:
• Have the ability to read and understand open source and commercial license terms and conditions.
• Have the ability to derive an understanding of license obligations.
• High level understanding of Risk acceptance and workflow in case of non-compliant licenses.
• Posses knowledge in understanding working flow for any of the popular programming language(s)and scripting language(s) to understand and identify plagiarism of code or logic.
• Should have working knowledge of using any of the SCA tools (Blackduck, Sonatype Lifecycle, MendIO, Revenera codeinsight, FOSSID).
• Should possess understanding of SCA package scanning and snippet scanning
• Should be able to explain and train teams on different categories of open-source licenses.
• Should be able to identify origin open-source of code/package.
• Working knowledge of SBOM generation and review of data within it.
• Clear written communication and oration skills.
• A desire to scale security through education and compliance.
The candidate needs to have at least 4 years of hands-on experience in open-source licensing and compliance, with the ability to work independently and take ownership of these responsibilities.
It is an advantage to have:
• Solid software engineering experience in one or more general purpose languages and strong experience in IT Architecture.
• Experience with CI/CD pipelines.
• As a good understanding of application security awareness of OWASP Top 10 vulnerabilities and OWASP ASVS requirements.
• Experience with security maturity models frameworks like OWASP SAMM or BSIMM.
• Experience analyzing and improving products and software security at scale.
• Experience in implementing application security testing processes & tools.
• Aware of Cyber Resilience Act (CRA) activities in EU or similar regulations across the world.
What´s in it for you?
• Application security is an area of growing importance. While we can´t offer you an effortless job, we can offer you a chance to be part of an exciting, growing and evolving domain.
• We are ready to help you develop and gain experience in areas you need to be a successful Open-Source Compliance Coordinator.
• Our team is fun to work with, diverse and we are all passionate about developing, supporting and helping others in many aspects of software development.
Informations de la mission :
- Début de mission : 01/09/2026
- Durée : 6 mois
- Date de publication : 01/09/2026
- Date limite de candidature : 31/10/2026
Compétences recherchées
Sonatype Lifecycle (Indispensable)Blackduck (Indispensable)MendIO (Indispensable)Revenera codeinsight (Indispensable)FOSSID (Indispensable)SCA (Indispensable)SBOM (Indispensable)DevSecOps (Indispensable)CI/CD (Indispensable)OWASP Top 10 (Indispensable)OWASP ASVS (Indispensable)OWASP SAMM (Indispensable)BSIMM (Indispensable)Application security (Indispensable)Software Composition Analysis (Indispensable)Open-Source software compliance (Apprécié)Software Composition Analysis (SCA) (Apprécié)License analysis (Apprécié)SBOM generation and review (Apprécié)CI/CD pipelines (Apprécié)IT Architecture (Apprécié)Security training and communication (Apprécié)
Intéressé(e) ?
Rejoignez l'équipe et participez à nos projets ambitieux.