Compliance Manager

Let's introduce ourselves

At Volvo Cars, we are making bold digital visions come true. We aim to be the leader in the automotive world by creating a digital ecosystem built around making our customers' lives less complicated. What we all have in common at Volvo Cars is our passion for protecting lives, our endless curiosity and our dedication to create a new future for the automotive industry. Our human centric focus is what separates us from all other car companies.

What you'll do

As Global Open Source Compliance Manager, you will play a critical role in ensuring that our use of open source software is responsible, transparent, and aligned with legal and regulatory expectations. You’ll work closely with engineering, legal, procurement, and product teams to operationalize OSS governance and support the safe and scalable use of open source across the company.

We provide:

• A key role in enabling Volvo Cars’ software transformation through trusted OSS practices
• Opportunities to shape and improve compliance processes and tooling across global teams
• A collaborative and inclusive culture that values openness, accountability, and ethical development
• Access to leading OSS compliance platforms and standards (e.g., SPDX, OpenChain, SBOM tooling)
• A flexible work environment with support for professional growth and continuous learning
• Competitive compensation and benefits tailored to your experience and impact

Key Responsibilities:

Volvo Cars has established foundational OSS policies and governance structures, but consistent implementation, keeping up to date with new legal requirements, and adoption across global teams remains a critical focus. This role is about enabling that adoption—ensuring that compliance is not just a requirement, but a well-supported and scalable practice embedded in how we build software.

Key responsibilities include:

• Operationalize and maintain Volvo Cars’ OSS compliance framework, including policies, directives, and procedures.
• Manage and improve tooling for OSS scanning, license analysis, and Software Bill of Materials (SBOM) generation (e.g. FossID, SPDX, CycloneDX).
• Support engineering and product teams in identifying, documenting, and resolving OSS license obligations and risks.
• Collaborate with legal, procurement, and security teams to ensure OSS compliance is embedded in development and sourcing workflows.
• Monitor regulatory developments and industry standards related to OSS compliance and ensure Volvo Cars remains aligned.
• Provide training, documentation, and hands-on support to teams across the company to build compliance awareness and capability.
• Contribute to external OSS compliance initiatives and working groups (e.g., OpenChain, SPDX), in coordination with the strategic OSS lead.

What you'll bring

We’re looking for someone who can turn policy into practice — someone who understands the complexity of OSS compliance and knows how to make it scalable, understandable, and embedded in everyday workflows.

You might be the right fit if you:

• Have experience in OSS compliance, license management, or software governance within a global organization.
• Understand OSS licenses (e.g., GPL, MIT, Apache), license compatibility, and legal obligations — and can translate that into practical guidance.
• Are familiar with OSS compliance tools and SBOM generation platforms, and know how to integrate them into development pipelines.
• Know the standards and frameworks that matter (e.g., OpenChain, SPDX, ISO/IEC 5230), and how to apply them effectively.
• Communicate clearly and confidently with technical and non-technical stakeholders, building trust and understanding.
• Are detail-oriented, proactive, and passionate about building scalable, transparent, and ethical compliance processes.
• Enjoy working across disciplines and geographies to support a global software organization.