The Americas IT Governance, Compliance & Service Management Tower Lead

leads a continental service designed to strengthen audit readiness, control sustainability, service management discipline and cybersecurity governance across IT organizations in the Americas. The role establishes a continuous, evidence-based operating model so local IT teams can demonstrate compliance at any point in time.

KEY ACCOUNTABILITIES

1. Controls and Compliance Governance

- Own the Americas operating model for continuous IT control readiness, evidence quality, control follow-up and remediation visibility.
- Coordinate the preparation, validation and maintenance of audit-support information with RBU and local IT organizations.
- Create consistent governance for control owners, evidence owners, review cycles, escalation paths and retention of supporting documentation.
- Establish reusable control narratives, evidence standards, checklists, dashboards and readiness reviews to reduce reactive audit preparation.
- Monitor control gaps, overdue actions, recurring observations and remediation commitments; escape material risks through the appropriate governance channels.
- Partner with Internal Audit, IT leadership, control owners and subject-matter experts while preserving clear ownership and accountability in local IT organizations.
- Ensure that documentation is current, traceable, defensible and available for internal and external assurance activities.

2. Audit Information and Technology Records

- Govern the completeness and currency of organizational charts, role and accountability information, application and solution inventories, server and infrastructure records, security standards, software versions, patch and upgrade status,



installed capacity information, training records and other required audit evidence.
- Define minimum information standards and review routines for basic and specialized technology documentation across countries and IT domains.
- Coordinate subject-matter experts to address evidence requests involving applications, infrastructure, security, service management and technology lifecycle topics.
- Promote a single source of truth and reduce duplication, inconsistency and unsupported manual reporting.

3. Service Management Governance

- Continue and strengthen current Service Management services across the Americas SSC IT scope.
- Oversee the maintenance, quality and governance of global application inventory information, application models, service levels, service records and related documentation.
- Champion disciplined Incident, Problem, Change, Request, Knowledge, Configuration, Asset, Service Level and Continual Improvement practices where applicable.
- Use service metrics, trend analysis and stakeholder feedback to identify process, data-quality and automation opportunities.
- Coordinate with service owners and support teams to maintain clear SLAs, OLAs, service catalog information and operational accountabilities.

4. Security and Cybersecurity Governance





- Reinforce Security and Cybersecurity governance capabilities in alignment with General and Americas strategies, standards and priorities.
- Embed security, access, vulnerability, patching, technology lifecycle, resilience and regulatory considerations into control and service-management routines.
- Coordinate with Security, Infrastructure, Application and local IT teams to track security-related control evidence, gaps and remediation actions.
- Promote secure-by-design and control-by-design practices for new solutions, changes, automation and innovation initiatives.

5. Business, Innovation and Automation Partnership

- Engage business leaders to understand projects and initiatives that require governance, compliance, security or service-management support.
- Identify and prioritize automation opportunities for evidence collection, control monitoring, reporting, workflow, reminders and management dashboards.
- Translate control and audit requirements into practical business and technology actions without creating unnecessary administrative burden.
- Build executive-ready communications that clearly present status, risk, decisions required, ownership and next steps.

6. Tower Leadership and Stakeholder Management

- Lead, develop and coordinate a team of governance, service-management, security and compliance specialists.
- Define roles, objectives, service offerings, capacity plans, priorities and performance measures for the tower.
- Maintain trusted relationships with RBU IT leaders, local IT leaders, Global functions, auditors, business stakeholders and external service providers.
- Manage demand, resources, suppliers and budget responsibilities within the approved oper

📌 JD IT Governance, Compliance (Ciudad de México)
🏢 Linde Latam Norte
📍 Ciudad de México