The Hartford · 14 hours ago
Senior Analyst, Open Source Software (OSS) Compliance
Charlotte, NC
Full-time
Hybrid
Mid, Senior Level
$102K/yr - $152K/yr
5+ years expThe Hartford is an insurance company focused on making a difference, and they are seeking a Senior Analyst for Open Source Software Compliance. This role involves managing OSS assets, ensuring compliance with licensing requirements, and building an OSS inventory as part of the Software Asset Management program.
FinanceHuman ResourcesProperty & Casualty InsuranceHealth InsuranceAuto InsuranceCommercial InsuranceEmployee BenefitsFinancial ServicesInsuranceLife InsuranceProperty Insurance
No H1B
Responsibilities
Develop and maintain a comprehensive inventory of all open-source software components used across The Hartford’s applications and environments. Continuously update the OSS inventory through scans, developer inputs, and integration with build pipelines
Monitor and enforce compliance with OSS license terms and usage policies. For each OSS component, verify that usage meets the license obligations (e.g., attribution, source code availability). Work with the Security team to proactively flag any OSS licenses that pose legal or security risks (e.g., copyleft licenses) and drive the approval or remediation process (up to and including removal or purchase of support if required). Maintain an OSS compliance dashboard to give visibility into the organization’s OSS risk posture
Serve as the primary owner of The Hartford’s OSS usage policy and related documentation. Update and refine OSS governance documents (license compliance guidelines, approval workflows for new OSS, exception handling procedures) and ensure they are communicated and adhered to across IT. Conduct training or info-sessions for development teams on OSS compliance best practices. When needed, lead the review of new OSS requests or license exceptions through a governance board, providing recommendations based on risk and alignment with policy
Act as a liaison between the SAM team and multiple stakeholders on OSS matters. Work closely with software engineering teams to guide them in selecting OSS components that meet policy; partner with Legal and Risk departments to interpret license terms and handle any external inquiries or disputes; coordinate with Procurement/ITAM if any OSS requires support contracts or if we transition from OSS to commercial alternatives. This cross-functional work ensures OSS efforts are aligned with overall IT asset management and risk management processes
Track key metrics around OSS usage and compliance. Regularly report on OSS compliance status to SAM leadership and governance bodies. Use these insights to suggest improvements to our tooling or processes – for example, enhancing our SAM Pro configuration to better accommodate OSS data, or improving automation for license obligation checks. Stay current on trends in open-source licensing and tooling (such as new regulations or community best practices) and update The Hartford’s approach accordingly
Qualification
Required
Bachelor's degree in Computer Science, Software Engineering, Information Security, or related field
5+ years of experience in software asset management, open-source compliance, or a related field (such as DevSecOps or software license management), with a significant focus on managing open-source software
In-depth understanding of open-source licenses and their implications
Proven experience auditing or governing open-source usage in a corporate setting – you should be able to cite examples of detecting a non-compliant OSS usage and resolving it (e.g., removing a component or altering use to comply with license)
Familiarity with legal considerations of open source and how to document compliance is important
Hands-on experience with ServiceNow SAM Pro or similar asset management tools, particularly in tracking software components and licenses
Comfortable with querying data and using reporting tools (PowerBI) to analyze software inventory information
Basic understanding of development pipelines and how OSS libraries are introduced (to effectively integrate compliance checks)
Strong analytical skills to identify compliance issues from large datasets of components and dependencies
Attention to detail in reviewing license text and usage conditions
Ability to assess risk levels of OSS components and make based on that analysis
Excellent communication skills, especially in translating complex license requirements into clear guidance for developers and stakeholders
Experience working cross-functionally
Must be able to influence and educate others who may not have a compliance background, gaining their buy-in for necessary controls
Self-starter mindset with enthusiasm for building a function from the ground up
Passionate about open source and stays updated on the latest developments in OSS licensing, tools, and community practices
Able to proactively improve processes and policies without always having a pre-existing template
Benefits
Short-term or annual bonuses
Long-term incentives
On-the-spot recognition
Company
The Hartford
The Hartford is an industry leading provider of property and casualty insurance, group benefits and mutual funds.
10001+ employees
Funding
Current Stage
Public CompanyTotal Funding
unknown1995-12-15IPO
Leadership Team
Christopher Swift
Chief Executive Officer
Recent News
2025-12-09
2025-12-08
Company data provided by crunchbase