Senior Manager of Information Security

Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence.

Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises.

Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.

Responsibilities

JOB PURPOSE

The Senior Manager of Information Security is responsible for establishing, leading, and maintaining the organization’s cybersecurity and information security programs to ensure alignment with business objectives, regulatory compliance, and security best practices. This role provides strategic direction, oversees cybersecurity operations, and manages risk across both IT and OT environments. The Senior Manager will lead a team of cybersecurity professionals and collaborate closely with internal departments, executive leadership, and external partners to protect the organization’s digital assets and ensure risk levels remain within acceptable thresholds.

Key

Accountabilities

Develop, implement, and maintain a comprehensive cybersecurity strategy that aligns with business goals, regulatory requirements, and evolving threat landscapes. Lead and mature the organization’s cybersecurity program through risk-based decision-making and continuous improvement.

Industry Expertise & Thought Leadership

Stay informed on evolving IT and OT threat landscapes, cyberattack vectors, and relevant cybersecurity frameworks (e.g., NIST CSF, IEC/ISA 62443, CIS Controls). Maintain deep awareness of industry-specific challenges and regulations (e.g., NERC CIP and FERC) and how they impact cybersecurity programs.

Cybersecurity Operations & Risk Management

Direct the day-to-day security operations, including incident response, threat detection, vulnerability management, and third-party/vendor security risk management. Ensure the selection, configuration, and ongoing management of security tools and processes such as SIEM, endpoint protection, firewalls, and cloud security solutions.

Governance, Compliance & Policy Oversight

Ensure compliance with applicable regulations, industry standards, and internal governance frameworks, including NIST, ISO/IEC 27001, CIS Controls, NERC CIP, and IEC/ISA 62443. Oversee the development and enforcement of cybersecurity policies, standards, and procedures.

Incident Response & Business Continuity

Lead organizational response to cybersecurity incidents, including investigation, containment, recovery, and communication. Conduct tabletop exercises and maintain readiness through robust incident response and disaster recovery planning.

Security Awareness & Training

Drive security awareness and education programs across all levels of the organization to foster a culture of security consciousness and vigilance.

Recruit, mentor, and lead a high-performing cybersecurity team

Foster collaboration across IT, OT, and business units to embed security in all operations.

Stakeholder Engagement & Reporting

Serve as the primary cybersecurity advisor to executive leadership, providing regular updates on cybersecurity risks, incidents, and program maturity. Build relationships across key departments including Legal, Compliance, and Operations.

Manage the cybersecurity budget and oversee relationships with security vendors and service providers to ensure optimal use of resources and alignment with strategic objectives.

Qualifications Experience/Qualifications/Education Required

Education

Bachelor’s degree in Computer Science, Information…