Director and Associate General Counsel, Cybersecurity

Meta is seeking a highly motivated counsel to lead its global cybersecurity legal team and advise the company on a broad range of security initiatives for Meta. The role will support Meta’s security teams (X-Sec) while working closely with business, engineering, operations, policy, and product teams, as well as other teams across Meta Legal.

The position will be responsible for counseling our X-Security and Governance, Risk and Compliance (GRC) teams as we pursue our objectives of maturing our security capabilities at scale; identifying and addressing our top security risks (including data access management, potential compromise of Meta data and systems, and security of our AI products and models);meeting and exceeding our legal and regulatory compliance obligations (including SEC Rules, NIS2, FTC, and other existing and emerging global regulatory regimes); and enabling the company to continue to deliver on our product roadmap. This position will also serve as a critical leader for the company’s Regulatory Readiness function for cybersecurity.Director and Associate General Counsel, Cybersecurity Responsibilities

• Lead a global team of experienced attorneys in building and maintaining a best-in-class cybersecurity legal function for Meta
• Provide mission-focused legal advice to the CISO and X-Sec and Global Risk Compliance leadership and teams as it relates to managing cybersecurity risks and compliance with global cybersecurity laws and regulations
• Oversee outside counsel engagements relating to our cybersecurity program and matters
• Ensure our cybersecurity systems and controls comply with global regulatory requirements and serve as a critical leader for our overall Regulatory Readiness processes
• Review and provide guidance on security plans and audits, such as SOC2 and SOC3 certifications, as well as GRC programs and controls testing
• Build, support, and improve incident detection and response processes
• Provide support and counsel during cybersecurity-related investigations
• Provide legal support to those teams protecting Meta and our users from abuse by malicious actors
• Support the defense of Meta in legal and regulatory engagements and matters relating to cybersecurity
• Support security programs concerning MFT security, our AI models and systems, Reality Labs and the metaverse, red teams, Bug Bounty, third party assessments, location-based risk, infrastructure and data centers, and subsea cables.

Minimum Qualifications

• J.D. (or foreign equivalent) and active membership in at least one bar jurisdiction
• 12+ years of legal experience, including substantial work in cybersecurity
• 10+ years people management experience including managing leaders and managing remotely across regions, proven track record of attracting, scaling and developing teams
• Experience communicating effectively to all levels of the organization, including executives
• Experience conducting and supporting global incident response processes and cybersecurity investigations
• Global regulatory experience, including with GDPR, NIS/NIS-2, SEC, FTC, and state regulatory regimes

Preferred Qualifications

• Experience working with law enforcement and/or intelligence community authorities
• Experience managing, investigating and/or prosecuting cybersecurity matters
• In-house counsel experience
• Experience working with regulators, data protection authorities, financial institutions, and/or Internet industry associations
• Experience with cybersecurity standards, frameworks, risk assessments and certification processes, e.g., SOC 1, 2 & 3, ISO/IEC 27001, 27002 and 27005, NYDFS, and/or the NIST Cybersecurity Framework
• Experience working on policy issues related to cybersecurity, investigations, and privacy

For those who live in or expect to work from California if hired for this position, please click here for additional information. About Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—be