Director, Security Compliance

Company Overview Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence. Company Overview Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence. Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers. Responsibilities Job Purpose The Director, Security Compliance is responsible for overseeing Pattern's IT security compliance program, including NERC CIP Reliability Standards, Sarbanes-Oxley (SOX) IT General Controls, and the enterprise Governance, Risk and Compliance (GRC) framework across Pattern's IT and OT environments. This role serves as the technical Subject Matter Expert bridging compliance requirements and Pattern's IT/OT architecture, partnering with Security Operations, IT Operations, Legal, Internal Audit, and Pattern's separate Regulatory Compliance department to ensure comprehensive coverage. The position reports to the CTO on an interim basis, pending the hire of a Chief Information Security Officer. Key Accountabilities Oversee Pattern's NERC CIP compliance program (Operations & Planning and Critical Infrastructure Protection Standards) across IT and OT environments; serve as Subject Matter Expert cross-functionally and ensure audit readiness. Own the SOX IT General Controls program; ensure testing, documentation, and remediation are completed on schedule. Own Pattern's enterprise Governance, Risk and Compliance (GRC) framework and tooling administration via a dedicated GRC Lead, including chairing the Risk Review Board. Manage direct reports (Senior Manager, NERC Compliance; SOX Lead; GRC Lead) and coordinate with Security Operations and IT Operations to maintain the compliance oversight/evaluate/execute boundary. Lead all NERC-related engagements, including audits, spot checks, self-certifications, ad hoc data requests, and NERC Alerts. Develop, revise, and maintain IT/OT security policies, standards, and governance documentation as part of the internal governance framework. Monitor industry and regulatory compliance trends (NERC, SOX/SEC, evolving cybersecurity regulation) and communicate impacts to leadership and impacted stakeholders. Verify new and updated IT and OT assets are correctly classified and documented for NERC CIP compliance as part of the asset integration workflow. Qualifications Experience/Qualifications/Education Required Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent experience). At least 10 years of combined experience in IT/OT security and regulatory compliance (NERC CIP, SOX/ITGC, GRC), including direct technical exposure. Proven ability to translate regulatory and compliance requirements into technical controls across IT and OT environments. Strong knowledge of internal control, compliance, and procedure development, with the ability to manage risk for a scalable program. Effective communication skills, with the ability to translate technical items efficiently for internal stakeholders. Results-oriented and comfortable managing multiple concurrent priorities. CISSP or equivalent certification. Experience in critical infrastructure or energy-sector compliance. Prior experience in a scaling or track organization. Established working relationships with NERC and regional entity auditors. The expected starting pay range for this role is $145,000.00 - $200,000.00 USD. This range is an estimate and base pay may be above or below the ranges based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern’s compensation program includes a bonus structure for full-time employees of all levels. We also provide a comprehensive benefits package which includes medical, dental, vision, short and long-term disability, life insurance, voluntary benefits, family care benefits, employee assistance program, paid time off and bonding leave, paid holidays, 401(k)/RRSP retirement savings plan with employer contribution, and employee referral bonuses. Pattern Energy Group is an Equal Opportunity Employer. #J-18808-Ljbffr Pattern Energy