Director, Security Compliance

Pattern Energy Group•Houston, TX

2d•Hybrid

About The Position

The Director, Security Compliance is responsible for overseeing Pattern's IT security compliance program, including NERC CIP Reliability Standards, Sarbanes-Oxley (SOX) IT General Controls in support of Pattern's readiness, and the enterprise Governance, Risk and Compliance (GRC) framework across Pattern's IT and OT environments. This role serves as the technical Subject Matter Expert bridging compliance requirements and Pattern's IT/OT architecture, partnering with Security Operations, IT Operations, Legal, Internal Audit, and Pattern's separate Regulatory Compliance department to ensure comprehensive coverage. The position reports to the CTO on an interim basis, pending the hire of a Chief Information Security Officer who will consolidate Security and Compliance.

Requirements

Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent experience).
At least 10 years of combined experience in IT/OT security and regulatory compliance (NERC CIP, SOX/ITGC, GRC), including direct technical exposure.
Proven ability to translate regulatory and compliance requirements into technical controls across IT and OT environments.
Strong knowledge of internal control, compliance, and procedure development, with the ability to manage risk for a scalable program.
Effective communication skills, with the ability to translate technical items efficiently for internal stakeholders.
Results-oriented and comfortable managing multiple concurrent priorities.
CISSP or equivalent certification.
Experience in critical infrastructure or energy-sector compliance.
Prior experience in a scaling or track organization.
Established working relationships with NERC and regional entity auditors.

Responsibilities

Oversee Pattern's NERC CIP compliance program (Operations & Planning and Critical Infrastructure Protection Standards) across IT and OT environments; serve as Subject Matter Expert cross-functionally and ensure audit readiness.
Own the SOX IT General Controls program; ensure testing, documentation, and remediation are completed on schedule.
Own Pattern's enterprise Governance, Risk and Compliance (GRC) framework and tooling administration via a dedicated GRC Lead, including chairing the Risk Review Board.
Manage direct reports (Senior Manager, NERC Compliance; SOX Lead; GRC Lead) and coordinate with Security Operations and IT Operations to maintain the compliance oversight/evaluate/execute boundary.
Lead all NERC-related engagements, including audits, spot checks, self-certifications, ad hoc data requests, and NERC Alerts.
Develop, revise, and maintain IT/OT security policies, standards, and governance documentation as part of the internal governance framework.
Monitor industry and regulatory compliance trends (NERC, SOX/SEC, evolving cybersecurity regulation) and communicate impacts to leadership and impacted stakeholders.
Verify new and updated IT and OT assets are correctly classified and documented for NERC CIP compliance as part of the asset integration workflow.