Senior Director, Information and Cybersecurity

AVP, Information And Cybersecurity

The AVP, Information and Cybersecurity is accountable for supporting SVP, Enterprise Technology in establishing, operating, and continuously improving the cybersecurity, technology risk, operational resilience, AI governance, and critical infrastructure protection capabilities that enable Pattern Energy to operate safely, reliably, and securely.

This role, with guidance from the SVP, Enterprise Technology, provides enterprise leadership across cybersecurity governance, cyber risk management, security operations, operational technology (OT) security, cyber resilience, identity and access governance, third-party risk management, AI security, and regulatory compliance activities. The role is responsible for protecting Pattern's corporate, cloud, operational technology, generation, storage, and transmission environments while supporting business growth, operational reliability, and technology modernization.

The AVP, Information and Cybersecurity partners closely with Enterprise Technology, Power Operations, Engineering, EPC, Legal, Compliance, Internal Audit, Enterprise Excellence, and executive leadership teams to ensure cybersecurity, resilience, and technology risk management capabilities are embedded into enterprise operations and strategic decision-making.

Success in the role requires balancing operational reliability, safety, regulatory compliance, cybersecurity risk reduction, enterprise scalability, and disciplined execution while enabling innovation and reducing unnecessary complexity.

The AVP, Information and Cybersecurity is also accountable for ensuring the resilience, recoverability, and cybersecurity readiness of enterprise and operational technology environments supporting Pattern's generation, storage, and transmission assets. This includes executive accountability for cybersecurity governance supporting NERC CIP obligations, cyber crisis management, operational resilience, and AI security governance.

This role helps drive enterprise prioritization, governance, and operational execution discipline in partnership with business leadership, Enterprise Excellence, and other enterprise stakeholders. The role is expected to build durable internal cybersecurity capability, improve cyber governance maturity, and reduce organizational dependency on fragmented processes and external implementation coordination.

The role serves as an advisor to the CEO, COO, Executive Leadership Team, and Board on cybersecurity, technology risk, operational resilience, AI governance, and critical infrastructure protection.

Key Accountabilities

• Develop and execute a multi-year cybersecurity, resilience, technology risk, and AI governance strategy aligned with enterprise objectives, operational priorities, and growth plans.
• Establish enterprise cybersecurity governance, risk management, and reporting processes that improve accountability, transparency, and decision quality.
• Ensure cybersecurity, resilience, AI, and technology risks are appropriately incorporated into enterprise planning, investment decisions, acquisitions, integrations, and strategic initiatives.
• Develop cybersecurity operating and capital budgets, ensuring investments align with enterprise priorities, risk reduction objectives, resilience requirements, and regulatory obligations.
• Develop cybersecurity investment plans and assess initiatives based on risk reduction, operational resilience, business value, and long-term sustainability.
• With support from the SVP, Enterprise Technology, provide regular reporting to executive leadership and the Board regarding cyber risk posture, material incidents, resilience capabilities, emerging threats, regulatory developments, NERC CIP readiness, and strategic priorities.
• Conduct periodic cyber maturity assessments, benchmarking exercises, and independent reviews to support continuous improvement and strategic planning.
• Establish enterprise security awareness, education, executive cyber literacy, and AI awareness programs that promote a culture of security, resilience, and responsible technology use across the organization.

Cybersecurity Strategy, Risk & Governance

• Lead enterprise cybersecurity capabilities across threat detection, threat intelligence, vulnerability management, identity security, cloud security, incident response, cyber defense, and attack surface management.
• Ensure effective security governance and protection capabilities across enterprise infrastructure, cloud platforms, operational technology environments, and critical business systems.
• Ensure effective capabilities exist to identify, assess, respond to, and recover from cyber threats affecting enterprise and operational technology environments.
• Establish cyber crisis management, cyber recovery, business continuity, and disaster recovery capabilities appropriate for a critical infrastructure operating environment.
• Support incident response, disaster recovery, operational resilience, and technology risk management activities across the…