ServiceNow Software Asset Management Analyst

The ServiceNow Software Asset Management Analyst SBOM is a member of the Software Asset Management (SAM) team. This role supports the team's responsibilities for software inventory, license and entitlement management, software compliance, lifecycle management, software normalization, and unauthorized software remediation. While participating in the SAM team's broader operational responsibilities, the primary focus is the organization's Software Bill of Materials (SBOM) program. The analyst is responsible for SBOM collection, validation, analysis, component identification and normalization, open-source software visibility, and integration of SBOM information with software asset and license data. This position partners with Enterprise Architecture, Application Development, Vendor Management, Procurement, Third-Party Risk Management, Technology Risk, Cybersecurity, and software vendors to improve visibility and governance of software and its components.

Primary Responsibilities SBOM

• Serve as a key SAM resource supporting the organization's SBOM program, including processes, standards, procedures, governance, and continuous improvement.
• Design functional SBOM processes and solutions and develop detailed business and functional requirements.
• Develop and execute functional and user acceptance testing (UAT), document defects, and validate solutions.
• Collect, validate, maintain, and analyze SBOMs for internally developed and third-party software.
• Maintain visibility into commercial, open-source, and embedded software components.
• Identify and normalize software components, publishers, products, versions, and dependencies.
• Integrate and reconcile SBOM component data with software license and entitlement data.
• Support the identification and analysis of open-source software components.
• Associate SBOM data with applications, software products, software models, and other relevant records.
• Leverage data from GitLab, JFrog Artifactory, ServiceNow SAM, Flexera, and Technopedia/DejaCode.
• Analyze SBOM data to identify inconsistencies and other data-quality concerns.
• Work with Procurement, Third-Party Risk Management, and software vendors to support SBOM collection.
• Develop and maintain SBOM metrics, dashboards, reporting, and audit evidence.
• Identify opportunities to automate and mature SBOM collection, normalization, analysis, and reporting.

Software Asset Management Team Responsibilities

• Maintain and analyze software inventory, installation, license, contract, and entitlement information.
• Perform software discovery review and software product normalization.
• Support software license reconciliation and identify compliance and optimization opportunities.
• Maintain and validate software models, entitlements, license metrics, and related SAM information.
• Research software publishers, products, licensing models, and lifecycle information.
• Monitor software lifecycle information, including end-of-life and end-of-support status.
• Review and process unauthorized software remediation tasks.
• Support software audits, license reviews, compliance assessments, and information requests.
• Identify and remediate SAM data-quality and normalization issues.
• Support SAM controls, procedures, reporting, metrics, and audit evidence.
• Participate in software compliance, optimization, and governance initiatives.

Required Qualifications

• 3+ years of experience with ServiceNow Software Asset Management (SAM).
• 3+ years of experience in Software Asset Management, IT Asset Management, software licensing, software governance, application management, or a related technology discipline.
• Strong understanding of Software Bills of Materials (SBOMs) and software component management.
• Working knowledge of Software Asset Management and software lifecycle management principles.
• Experience analyzing software inventory, installation, usage, license, and entitlement data.
• Knowledge of software discovery and normalization concepts.
• Understanding of software licensing, entitlement, subscription, and compliance concepts.
• Strong data analysis, reconciliation, research, and problem-solving skills.
• Ability to correlate and analyze information across multiple technology data sources.
• Strong written and verbal communication skills.
• Ability to collaborate effectively across Technology, Cybersecurity, Procurement, Risk, and business functions.

Preferred Skills & Knowledge

• Knowledge of Flexera software inventory, discovery, and license management capabilities.
• Familiarity with GitLab, JFrog Artifactory, and artifact repositories.
• Knowledge of Technopedia's DejaCode Open Source Content Pack.
• Experience collecting, reviewing, validating, and analyzing SBOMs.
• Understanding of CycloneDX and SPDX SBOM formats.
• Knowledge of open-source software licensing, components, and dependencies.
• Familiarity with software component and vulnerability identification standards (CVE, CPE, PURL).
• Experience correlating SBOM component information with software license and entitlement data.
• Experience processing unauthorized software remediation activities.
• Experience identifying software normalization issues and data gaps across multiple systems.

Core Competencies

• SBOM Management & Analysis
• Open-Source Software Governance
• Software Asset Management
• Software License Management
• License Compliance & Optimization
• Software Entitlement Management
• Software Lifecycle Management
• Unauthorized Software Remediation
• Data Analysis & Reconciliation
• ServiceNow SAM / CMDB
• Flexera
• GitLab
• JFrog Artifactory
• Technopedia / DejaCode
• Reporting & Metrics
• Process & Control Documentation