Senior Director, Information and Cybersecurity

Responsibilities JOB PURPOSE The AVP, Information & Cybersecurity supports the SVP, Enterprise Technology in establishing, operating, and continuously improving Pattern Energy's cybersecurity, technology risk, operational resilience, AI governance, and critical infrastructure protection capabilities. This leader partners closely with Enterprise Technology, Power Operations, Engineering, EPC, Legal, Compliance, Internal Audit, Enterprise Excellence, and executive leadership to embed cybersecurity and technology risk management into enterprise operations and strategic decision-making. Success requires balancing operational reliability, safety, regulatory compliance, cybersecurity risk reduction, scalability, and innovation while supporting secure business growth. The role is also responsible for ensuring the resilience, recoverability, and cybersecurity readiness of enterprise and operational technology environments supporting Pattern's generation, storage, and transmission assets, including executive oversight of NERC CIP governance, cyber crisis management, operational resilience, and AI security governance. Key Accountabilities Cybersecurity Strategy, Risk & Governance Develop and execute a multi-year cybersecurity, resilience, technology risk, and AI governance strategy aligned with enterprise objectives and growth plans. Establish enterprise governance, risk management, reporting, and investment processes that improve accountability, transparency, operational resilience, and decision-making. Develop cybersecurity operating and capital budgets while prioritizing investments based on business value, risk reduction, resilience, and regulatory obligations. Provide executive leadership and Board reporting on cyber risk, resilience, material incidents, emerging threats, NERC CIP readiness, and strategic priorities. Conduct cybersecurity maturity assessments, benchmarking, and continuous improvement initiatives. Promote a culture of cybersecurity awareness, executive cyber literacy, and responsible AI adoption across the enterprise. Cybersecurity Operations & Resilience Lead enterprise cybersecurity capabilities including threat detection, threat intelligence, vulnerability management, identity and cloud security, incident response, cyber defense, and attack surface management. Ensure effective protection, monitoring, response, recovery, business continuity, disaster recovery, and cyber crisis management across enterprise and operational technology environments. Leverage automation and AI-enabled capabilities to improve cybersecurity effectiveness, operational efficiency, and resilience. Oversee third-party cyber risk management across vendors, contractors, cloud providers, EPC partners, and strategic service providers. Operational Technology & Critical Infrastructure Security Lead cybersecurity governance supporting operational technology environments including SCADA, industrial control systems, generation, storage, transmission, plant communications, and operational support systems. Establish standards for secure architecture, remote access, network segmentation, monitoring, asset visibility, vendor connectivity, and operational resilience. Support secure integration of new facilities, acquisitions, operational technologies, and enterprise growth initiatives while maintaining reliability, safety, and resilience. Regulatory Compliance & NERC CIP Ensure cybersecurity programs comply with NERC CIP and other applicable cybersecurity, technology risk, and regulatory requirements. Serve as executive sponsor for NERC CIP governance, audit readiness, compliance reporting, remediation, and evidence management. Partner with Legal, Compliance, Internal Audit, Enterprise Technology, and operational leaders to maintain effective governance while adapting to evolving regulatory requirements. AI Security & Governance Establish governance, security, and risk management practices supporting responsible enterprise adoption of AI technologies. Ensure AI systems, autonomous workflows, third-party AI services, models, prompts, training data, and outputs are appropriately governed, monitored, and protected. Drive adoption of AI-enabled cybersecurity capabilities while maintaining strong cybersecurity, privacy, operational, and regulatory safeguards. Enterprise Architecture & Technology Modernization Partner with Enterprise Technology leadership to embed cybersecurity, resilience, AI governance, and compliance requirements into enterprise architecture, cloud transformation, operational technology initiatives, and modernization programs. Support scalable, secure technology architectures while reducing complexity and ensuring cybersecurity is integrated throughout technology acquisition, development, deployment, and support. Third-Party Risk Management Lead a risk-based third-party cybersecurity and supply chain risk management program across vendors, contractors, cloud providers, operational technology suppliers, EPC partners, and strategic service providers. Support cybersecurity due diligence for acquisitions, strategic partnerships, and major technology investments while embedding cybersecurity throughout procurement and vendor lifecycle management. Partner with business leaders and Enterprise Excellence to strengthen enterprise prioritization, governance, execution discipline, operational metrics, accountability, and value realization across cybersecurity initiatives. Talent & Organizational Leadership Build and develop high-performing cybersecurity teams across governance, architecture, OT security, resilience, AI security, and risk management. Foster a culture of accountability, continuous improvement, systems thinking, operational excellence, collaboration, succession planning, leadership development, and organizational capability. Strategic Leadership Serve as a trusted advisor to executive leadership and the Board on cybersecurity, technology risk, AI governance, operational resilience, and critical infrastructure protection. Support enterprise growth, acquisitions, technology modernization, and strategic initiatives while representing Pattern Energy in industry forums, NERC working groups, and cybersecurity organizations. Qualifications Experience / Qualifications / Education Required Bachelor's or Master's degree in Computer Science, Cybersecurity, Engineering, Information Systems, Business Administration, or a related discipline. 15+ years of progressive leadership experience across cybersecurity, technology risk, operational technology, operational resilience, or critical infrastructure environments. Experience leading cybersecurity programs within complex, highly regulated, or critical infrastructure industries. Strong expertise in cybersecurity governance, technology risk management, cyber defense, operational resilience, and critical infrastructure protection. Demonstrated experience supporting operational technology, industrial control systems, and NERC CIP compliance programs. Experience leading cyber crisis management, incident response, disaster recovery, business continuity, and enterprise resilience initiatives. Strong knowledge of NIST Cybersecurity Framework (CSF), NIST 800-53, NIST 800-82, IEC/ISA 62443, CIS Controls, and related security frameworks. Experience improving cybersecurity maturity, governance, resilience, and enterprise modernization. Experience establishing AI governance, AI security, or responsible AI programs preferred. Strong executive communication and stakeholder management skills with the ability to influence both technical and business leaders. Experience supporting operational technology environments within energy, utilities, industrial, or critical infrastructure sectors preferred. Professional certifications such as CISSP, CISM, CRISC, CISA, GICSP, GIAC, or equivalent are preferred. Ability to travel regularly to corporate offices, operating facilities, construction projects, and integration sites across North America. The expected starting pay range for this role is $203,000.00 $254,000.00 USD. This range is an estimate, and base pay may be above or below the range based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern's compensation program includes a bonus structure for full-time employees of all levels. We also provide a comprehensive benefits package which includes medical, dental, vision, short and long-term disability, life insurance, voluntary benefits, family care benefits, employee assistance program, paid time off and bonding leave, paid holidays, 401(k)/RRSP retirement savings plan with employer contribution, and employee referral bonuses. Pattern Energy Group is an Equal Opportunity Employer. #J-18808-Ljbffr Pattern Energy