The Americas IT Governance, Compliance & Service Management Tower Lead leads a continental service designed to strengthen audit readiness, control sustainability, service management discipline and cybersecurity governance across IT organizations in the Americas. The role establishes a continuous, evidence-based operating model so local IT teams can demonstrate compliance at any point in time. KEY ACCOUNTABILITIES 1. Controls and Compliance Governance
• Own the Americas operating model for continuous IT control readiness, evidence quality, control follow-up and remediation visibility.
• Coordinate the preparation, validation and maintenance of audit-support information with RBU and local IT organizations.
• Create consistent governance for control owners, evidence owners, review cycles, escalation paths and retention of supporting documentation.
• Establish reusable control narratives, evidence standards, checklists, dashboards and readiness reviews to reduce reactive audit preparation.
• Monitor control gaps, overdue actions, recurring observations and remediation commitments; escalate material risks through the appropriate governance channels.
• Partner with Internal Audit, IT leadership, control owners and subject-matter experts while preserving clear ownership and accountability in local IT organizations.
• Ensure that documentation is current, traceable, defensible and available for internal and external assurance activities. 2. Audit Information and Technology Records
• Govern the completeness and currency of organizational charts, role and accountability information, application and solution inventories, server and infrastructure records, security standards, software versions, patch and upgrade status, installed capacity information, training records and other required audit evidence.
• Define minimum information standards and review routines for basic and specialized technology documentation across countries and IT domains.
• Coordinate subject-matter experts to address evidence requests involving applications, infrastructure, security, service management and technology lifecycle topics.
• Promote a single source of truth and reduce duplication, inconsistency and unsupported manual reporting. 3. Service Management Governance
• Continue and strengthen current Service Management services across the Americas SSC IT scope.
• Oversee the maintenance, quality and governance of general application inventory information,



application models, service levels, service records and related documentation.
• Champion disciplined Incident, Problem, Change, Request, Knowledge, Configuration, Asset, Service Level and Continual Improvement practices where applicable.
• Use service metrics, trend analysis and stakeholder feedback to identify process, data-quality and automation opportunities.
• Coordinate with service owners and support teams to maintain clear SLAs, OLAs, service catalog information and operational accountabilities. 4. Security and Cybersecurity Governance
• Reinforce Security and Cybersecurity governance capabilities in alignment with Global and Americas strategies, standards and priorities.
• Embed security, access, vulnerability, patching, technology lifecycle, resilience and regulatory considerations into control and service-management routines.
• Coordinate with Security, Infrastructure, Application and local IT teams to track security-related control evidence, gaps and remediation actions.
• Promote secure-by-design and control-by-design practices for new solutions, changes, automation and innovation initiatives. 5. Business, Innovation and Automation Partnership
• Engage business leaders to understand projects and initiatives that require governance, compliance, security or service-management support.
• Identify and prioritize automation opportunities for evidence collection, control monitoring, reporting, workflow, reminders and management dashboards.
• Translate control and audit requirements into practical business and technology actions without creating unnecessary administrative burden.
• Build executive-ready communications that clearly present status, risk, decisions required, ownership and next steps. 6. Tower Leadership and Stakeholder Management
• Lead, develop and coordinate a team of governance, service-management, security and compliance specialists.
• Define roles, objectives, service offerings, capacity plans, priorities and performance measures for the tower.




• Maintain trusted relationships with RBU IT leaders, local IT leaders, Global functions, auditors, business stakeholders and external service providers.
• Manage demand, resources, suppliers and budget responsibilities within the approved operating model.
• Create a culture of accountability, customer focus, collaboration, continuous learning and continuous improvement across a culturally diverse environment. REQUIRED EXPERIENCE AND QUALIFICATIONS
• Bachelor's degree in Computer Science, Information Technology, Engineering, Business, Risk Management or a related discipline; equivalent relevant experience may be considered.
• Minimum 5 years of progressive experience in IT governance, IT controls, audit readiness, compliance, cybersecurity governance, IT Service Management or a closely related field.
• Proven experience leading teams and coordinating matrixed subject-matter experts across multiple countries or business units.
• Hands-on experience preparing, reviewing or sustaining IT control evidence and supporting internal or external audits.
• Working knowledge of ITIL-based service-management practices and of application, infrastructure, security and software-lifecycle environments.
• Experience with service-management platforms such as ServiceNow and with structured reporting, workflow or automation tools.
• Ability to communicate clearly with technical teams, auditors, business stakeholders and executive leadership in a large, diverse and global environment.
• Professional fluency in English; Spanish or Portuguese is an advantage for the Americas scope. Preferred Qualifications
• ITIL certification and relevant credentials in IT governance, risk, audit or security, such as COBIT, CISA, CRISC, CGEIT, ISO/IEC 27001 or equivalent.
• Experience with control frameworks and assurance practices in complex enterprise environments.
• Experience creating dashboards, automating workflows or improving evidence collection and control monitoring.
• Background in consulting, shared services, outsourcing or a multi-country IT operating model. CRITICAL SKILLS AND LEADERSHIP BEHAVIORS
• Capability
• Expected behavior
• Governance mindset
• Enterprise leadership
• Risk-based judgment
• Service orientation
• Executive communication
• Analytical discipline
• Change and automation
• Talent development
• Integrity and discretion

📌 JD IT Governance, Compliance (Ciudad de México)
🏢 Linde Latam Norte
📍 Ciudad de México