Open Source Adoption Lead
Technology Risk & OSS Compliance Lead | Open Source Program Office
London
£150k | Bonus & Benefits
Open Source Strategy, Governance & Risk Lead. The role is focused on defining, implementing, and overseeing enterprise-wide controls for open-source software + AI governance, and compliance within highly regulated environments.
Key Responsibilities:
* Design and maintain the Open Source Software (OSS) Control Framework and Risk Model to ensure compliant adoption and contribution of open-source components.
* Architect automated policy enforcement systems (Python, GitHub Actions) integrating SCA and SBOM tools.
* Partner with Legal, Risk, and Engineering to translate complex OSS licensing terms (GPL, AGPL, etc.) into practical DevSecOps policies.
* Lead AI risk and governance initiatives covering model transparency, bias mitigation, explainability, and resilience.
* Embed policy-as-code, AI fairness, and safety frameworks into CI/CD pipelines and ML workflows.
* Ensure compliance with emerging regulations (EU AI Act, DORA, GDPR, NIST AI Framework).
* Act as a subject-matter expert on AI vendor risk, ethical use of generative AI, and open-source contribution management.
Required Skills & Experience:
* 10+ years’ experience across AI/ML systems, risk management, and governance with 5+ years focused on open-source software or AI compliance.
* Strong understanding of OSS licensing (GPL, MIT, Apache, etc.), IP law, and AI model lifecycle governance.
* Proven experience automating compliance and risk controls using Python, CI/CD, and policy enforcement tools.
* Familiarity with cloud and DevSecOps environments (AWS, Azure, Jenkins, Docker, GitHub).
* Practical knowledge of responsible AI libraries (Fairlearn, LIME, Aequitas) and AI fairness evaluation frameworks.
* Excellent stakeholder management able to bridge Legal, Compliance, Engineering, and Executive leadership.