Senior Director, Information and Cybersecurity

Responsibilities

JOB PURPOSE

The AVP, Information & Cybersecurity supports the SVP, Enterprise Technology in establishing, operating, and continuously improving Pattern Energy's cybersecurity, technology risk, operational resilience, AI governance, and critical infrastructure protection capabilities.

This leader partners closely with Enterprise Technology, Power Operations, Engineering, EPC, Legal, Compliance, Internal Audit, Enterprise Excellence, and executive leadership to embed cybersecurity and technology risk management into enterprise operations and strategic decision-making. Success requires balancing operational reliability, safety, regulatory compliance, cybersecurity risk reduction, scalability, and innovation while supporting secure business growth.

The role is also responsible for ensuring the resilience, recoverability, and cybersecurity readiness of enterprise and operational technology environments supporting Pattern's generation, storage, and transmission assets, including executive oversight of NERC CIP governance, cyber crisis management, operational resilience, and AI security governance.

• Develop and execute a multi-year cybersecurity, resilience, technology risk, and AI governance strategy aligned with enterprise objectives and growth plans.
• Establish enterprise governance, risk management, reporting, and investment processes that improve accountability, transparency, operational resilience, and decision-making.
• Develop cybersecurity operating and capital budgets while prioritizing investments based on business value, risk reduction, resilience, and regulatory obligations.
• Provide executive leadership and Board reporting on cyber risk, resilience, material incidents, emerging threats, NERC CIP readiness, and strategic priorities.
• Conduct cybersecurity maturity assessments, benchmarking, and continuous improvement initiatives.
• Promote a culture of cybersecurity awareness, executive cyber literacy, and responsible AI adoption across the enterprise.

• Lead enterprise cybersecurity capabilities including threat detection, threat intelligence, vulnerability management, identity and cloud security, incident response, cyber defense, and attack surface management.
• Ensure effective protection, monitoring, response, recovery, business continuity, disaster recovery, and cyber crisis management across enterprise and operational technology environments.
• Leverage automation and AI-enabled capabilities to improve cybersecurity effectiveness, operational efficiency, and resilience.
• Oversee third-party cyber risk management across vendors, contractors, cloud providers, EPC partners, and strategic service providers.

• Lead cybersecurity governance supporting operational technology environments including SCADA, industrial control systems, generation, storage, transmission, plant communications, and operational support systems.
• Establish standards for secure architecture, remote access, network segmentation, monitoring, asset visibility, vendor connectivity, and operational resilience.
• Support secure integration of new facilities, acquisitions, operational technologies, and enterprise growth initiatives while maintaining reliability, safety, and resilience.

• Ensure cybersecurity programs comply with NERC CIP and other applicable cybersecurity, technology risk, and regulatory requirements.
• Serve as executive sponsor for NERC CIP governance, audit readiness, compliance reporting, remediation, and evidence management.
• Partner with Legal, Compliance, Internal Audit, Enterprise Technology, and operational leaders to maintain effective governance while adapting to evolving regulatory requirements.

• Establish governance, security, and risk management practices supporting responsible enterprise adoption of AI technologies.
• Ensure AI systems, autonomous workflows, third-party AI services, models, prompts, training data, and outputs are appropriately governed, monitored, and protected.
• Drive adoption of AI-enabled…