<h2>Overview</h2>Company Overview Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence.Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.<h2>Responsibilities</h2>Job PurposeThe Director of Information Security is responsible for establishing, leading, and maintaining the organization’s cybersecurity and information security programs to ensure alignment with business objectives, regulatory compliance, and security best practices. This role provides strategic direction, oversees cybersecurity operations, and manages risk across both IT and OT environments. The Director will lead a team of cybersecurity professionals and collaborate closely with internal departments, executive leadership, and external partners to protect the organization’s digital assets and ensure risk levels remain within acceptable thresholds. Key Accountabilities Leadership &amp; Strategy DevelopmentDevelop, implement, and maintain a comprehensive cybersecurity strategy that aligns with business goals, regulatory requirements, and evolving threat landscapes. Lead and mature the organization’s cybersecurity program through risk-based decision-making and continuous improvement. Industry Expertise &amp; Thought LeadershipStay informed on evolving IT and OT threat landscapes, cyberattack vectors, and relevant cybersecurity frameworks (e.g., NIST CSF, IEC/ISA 62443, CIS Controls). Maintain deep awareness of industry-specific challenges and regulations (e.g., NERC CIP and FERC) and how they impact cybersecurity programs. Cybersecurity Operations &amp; Risk ManagementDirect the day-to-day security operations, including incident response, threat detection, vulnerability management, and third-party/vendor security risk management. Ensure the selection, configuration, and ongoing management of security tools and processes such as SIEM, endpoint protection, firewalls, and cloud security solutions. Governance, Compliance &amp; Policy OversightEnsure compliance with applicable regulations, industry standards, and internal governance frameworks, including NIST, ISO/IEC 27001, CIS Controls, NERC CIP, and IEC/ISA 62443. Oversee the development and enforcement of cybersecurity policies, standards, and procedures. Incident Response &amp; Business ContinuityLead organizational response to cybersecurity incidents, including investigation, containment, recovery, and communication. Conduct tabletop exercises and maintain readiness through robust incident response and disaster recovery planning. Security Awareness &amp; TrainingDrive security awareness and education programs across all levels of the organization to foster a culture of security consciousness and vigilance. Team Leadership &amp; DevelopmentRecruit, mentor, and lead a high-performing cybersecurity team. Foster collaboration across IT, OT, and business units to embed security in all operations. Stakeholder Engagement &amp; ReportingServe as the primary cybersecurity advisor to executive leadership, providing regular updates on cybersecurity risks, incidents, and program maturity. Build relationships across key departments including Legal, Compliance, and Operations. Budget &amp; Vendor ManagementManage the cybersecurity budget and oversee relationships with security vendors and service providers to ensure optimal use of resources and alignment with strategic objectives. Other duties as needed<h2>Qualifications</h2>Experience/Qualifications/Education Required Education:<ul> <li>Bachelor’s degree in Computer Science, Information Security, Engineering, or related field required.</li> <li>Relevant certifications strongly preferred (CISSP, CISM, CRISC, CISA, CCSP, or equivalent).</li></ul>Experience:<ul> <li>Minimum 10 years of progressive cybersecurity experience, including at least 5 years in a leadership role managing teams.</li> <li>Deep technical knowledge of cybersecurity solutions, including hands-on experience with security tools, incident response, and risk management.</li> <li>Strong understanding of cybersecurity frameworks and regulatory standards such as NIST, ISO/IEC 27001, CIS Controls, NERC CIP, and IEC/ISA 62443.</li> <li>Experience with utility or energy generation industries and securing Industrial Control Systems (ICS) or SCADA is highly desirable.</li> <li>Familiarity with public cloud security (AWS, Azure, GCP or OCI) and advanced knowledge of network security, including firewall, router, and switch configurations.</li> <li>Proven ability to manage cross-functional teams and drive cybersecurity initiatives in complex environments.</li> <li>Strong communication and executive presence, with the ability to convey technical information to non-technical audiences and influence senior stakeholders.</li> <li>Demonstrated ability to balance security, risk management, and business objectives.</li> <li>Strong problem-solving, interpersonal, and leadership skills with a collaborative mindset.</li> <li>Data-driven approach to performance management and continuous improvement.</li> <li>Ability to work independently and across multiple teams in a fast-paced environment.</li></ul> Pattern Energy Group is an Equal Opportunity Employer.#LI-AT1 #LI-Hybrid

Pattern Energy Group is an independent, fully integrated energy company that develops, constructs, owns and operates renewable energy projects and transmission assets across North America, Japan, and parts of Latin America. The company focuses primarily on wind, solar and transmission. The Pattern Energy Group team has a history as one of the top North American renewable energy and transmission providers in the industry. The team is dedicated to delivering the highest value for its customers, partners, financial supporters and the communities in which it works, while exhibiting a strong commitment to promoting environmental stewardship and corporate responsibility. This is a temporary assignment expected to last two months.
&nbsp;
Pattern Energy Group operates in the United States, Canada, Japan, and Mexico with offices in San Francisco, Houston, San Diego, New York, Tokyo, and Toronto. Pattern Energy Group's corporate headquarters is in San Francisco.

Director of Information Security

<h2>Overview</h2>Company Overview&nbsp;Pattern Energy is a leading renewable energy company that develops, constructs, owns, and operates high-quality wind and solar generation, transmission, and energy storage facilities. Our mission is to transition the world to renewable energy through the sustainable development and responsible operation of facilities with respect for the environment, communities, and cultures where we have a presence.Our approach begins and ends with establishing trust, accountability, and transparency. Our company values of creative spirit, pride of ownership, follow-through, and a team-first attitude drive us to pursue our mission every day. Our culture supports our values by fostering innovative and critical thinking and a deep belief in living up to our promises. Headquartered in the United States, Pattern has a global portfolio of more than 30 power facilities and transmission assets, serving various customers that provide low-cost clean energy to millions of consumers.<h2>Responsibilities</h2>Job PurposeThe Director of Information Security is responsible for establishing, leading, and maintaining the organization’s cybersecurity and information security programs to ensure alignment with business objectives, regulatory compliance, and security best practices. This role provides strategic direction, oversees cybersecurity operations, and manages risk across both IT and OT environments. The Director will lead a team of cybersecurity professionals and collaborate closely with internal departments, executive leadership, and external partners to protect the organization’s digital assets and ensure risk levels remain within acceptable thresholds.&nbsp;Key Accountabilities&nbsp;Leadership &amp; Strategy DevelopmentDevelop, implement, and maintain a comprehensive cybersecurity strategy that aligns with business goals, regulatory requirements, and evolving threat landscapes. Lead and mature the organization’s cybersecurity program through risk-based decision-making and continuous improvement.&nbsp;Industry Expertise &amp; Thought LeadershipStay informed on evolving IT and OT threat landscapes, cyberattack vectors, and relevant cybersecurity frameworks (e.g., NIST CSF, IEC/ISA 62443, CIS Controls). Maintain deep awareness of industry-specific challenges and regulations (e.g., NERC CIP and FERC) and how they impact cybersecurity programs.&nbsp;Cybersecurity Operations &amp; Risk ManagementDirect the day-to-day security operations, including incident response, threat detection, vulnerability management, and third-party/vendor security risk management. Ensure the selection, configuration, and ongoing management of security tools and processes such as SIEM, endpoint protection, firewalls, and cloud security solutions.&nbsp;Governance, Compliance &amp; Policy OversightEnsure compliance with applicable regulations, industry standards, and internal governance frameworks, including NIST, ISO/IEC 27001, CIS Controls, NERC CIP, and IEC/ISA 62443. Oversee the development and enforcement of cybersecurity policies, standards, and procedures.&nbsp;Incident Response &amp; Business ContinuityLead organizational response to cybersecurity incidents, including investigation, containment, recovery, and communication. Conduct tabletop exercises and maintain readiness through robust incident response and disaster recovery planning.&nbsp;Security Awareness &amp; TrainingDrive security awareness and education programs across all levels of the organization to foster a culture of security consciousness and vigilance.&nbsp;Team Leadership &amp; DevelopmentRecruit, mentor, and lead a high-performing cybersecurity team. Foster collaboration across IT, OT, and business units to embed security in all operations.&nbsp;Stakeholder Engagement &amp; ReportingServe as the primary cybersecurity advisor to executive leadership, providing regular updates on cybersecurity risks, incidents, and program maturity. Build relationships across key departments including Legal, Compliance, and Operations.&nbsp;Budget &amp; Vendor ManagementManage the cybersecurity budget and oversee relationships with security vendors and service providers to ensure optimal use of resources and alignment with strategic objectives.&nbsp;Other duties as needed<h2>Qualifications</h2>Experience/Qualifications/Education Required&nbsp;Education:<ul> <li>Bachelor’s degree in Computer Science, Information Security, Engineering, or related field required.</li> <li>Relevant certifications strongly preferred (CISSP, CISM, CRISC, CISA, CCSP, or equivalent).</li></ul>Experience:<ul> <li>Minimum 10 years of progressive cybersecurity experience, including at least 5 years in a leadership role managing teams.</li> <li>Deep technical knowledge of cybersecurity solutions, including hands-on experience with security tools, incident response, and risk management.</li> <li>Strong understanding of cybersecurity frameworks and regulatory standards such as NIST, ISO/IEC 27001, CIS Controls, NERC CIP, and IEC/ISA 62443.</li> <li>Experience with utility or energy generation industries and securing Industrial Control Systems (ICS) or SCADA is highly desirable.</li> <li>Familiarity with public cloud security (AWS, Azure, GCP or OCI) and advanced knowledge of network security, including firewall, router, and switch configurations.</li> <li>Proven ability to manage cross-functional teams and drive cybersecurity initiatives in complex environments.</li> <li>Strong communication and executive presence, with the ability to convey technical information to non-technical audiences and influence senior stakeholders.</li> <li>Demonstrated ability to balance security, risk management, and business objectives.</li> <li>Strong problem-solving, interpersonal, and leadership skills with a collaborative mindset.</li> <li>Data-driven approach to performance management and continuous improvement.</li> <li>Ability to work independently and across multiple teams in a fast-paced environment.</li></ul>&nbsp;Pattern Energy Group is an Equal Opportunity Employer.#LI-AT1 #LI-Hybrid

Director of Information Security

About the Job

About the Company

Pattern Energy

Similar Jobs

Director of IT Operations

Director of IT Operations

Staff Program Manager, Information Security

Staff Program Manager, Information Security

Information Security Engineer

Information Security Engineer

Senior Security Engineer

Senior Security Engineer

Director, Cybersecurity Architecture

Director, Cybersecurity Architecture

IT Cyber Security Specialist

IT Cyber Security Specialist

Director of Security

Director of Security

Senior Information Systems Security Manager (ISSM)

Senior Information Systems Security Manager (ISSM)

Vice President Information Security (f/m/d)

Vice President Information Security (f/m/d)

Senior IT Data Security & OT Risk Engineer

Senior IT Data Security & OT Risk Engineer