In a significant leadership transition for the social media behemoth, Meta officially announced on Wednesday that Assaf Keren has been appointed as the company’s new Chief Information Security Officer (CISO). Keren, a seasoned veteran in the cybersecurity space, steps into a role that has become increasingly critical as Meta pivots its entire operational infrastructure toward the advancement of generative AI and large-scale machine learning models.
Keren’s appointment marks the end of an extensive search following the departure of Guy Rosen, Meta’s inaugural CISO, who stepped down earlier this year after a distinguished 13-year tenure. As Meta faces mounting regulatory pressure, evolving geopolitical threats, and the complexities of securing AI at a global scale, Keren’s arrival signals a strategic focus on building a "trust infrastructure" capable of supporting billions of users.
The Strategic Vision: Securing the AI Frontier
In a statement released via LinkedIn, Keren articulated the gravity of his new mandate. For a company like Meta, which operates at a scale few others can fathom, the intersection of cybersecurity and artificial intelligence is not merely a technical challenge—it is an existential one.
"Building AI at the frontier means building the trust infrastructure for it at the same frontier, with the same seriousness, at a scale that touches billions of people," Keren stated. "There are few places in the world where that problem is bigger, harder, or more consequential. The role brings together everything I’ve spent my career on: security, systems, and the human work of earning confidence."
Keren’s emphasis on "earning confidence" highlights a departure from traditional, perimeter-based security toward a philosophy of systemic integrity. At Meta, where AI models now underpin everything from content recommendation algorithms to ad-targeting systems and user safety tools, Keren is tasked with ensuring that these models remain resilient against adversarial attacks, data poisoning, and unauthorized manipulation.
A Career Defined by Scale: Chronology and Background
Assaf Keren arrives at Meta with a formidable resume that spans over two decades of high-level security leadership. His career trajectory demonstrates a deep familiarity with complex, high-traffic digital ecosystems—a prerequisite for managing the security posture of the world’s largest social network.
From PayPal to Qualtrics: The Evolution of a CISO
Keren’s professional narrative is defined by long-term strategic contributions. Before accepting the CISO role at Meta, Keren served as the Senior Vice President and Chief Security Officer (CSO) at Qualtrics, the enterprise experience management software giant. He joined Qualtrics in March 2024, tasked with fortifying the security of data-intensive enterprise platforms.
However, it was his nine-year tenure at PayPal that arguably cemented his reputation as an industry leader. During his time at the payments giant, Keren navigated the complexities of global financial regulation, fraud detection, and the protection of massive volumes of sensitive consumer financial data. Serving as CISO during a period of rapid digital transformation in the fintech sector, he oversaw the implementation of robust security protocols that allowed PayPal to scale securely across diverse international markets.
The Legacy of Guy Rosen
The transition sees Keren succeeding Guy Rosen, a pivotal figure in Meta’s history. Rosen, who was appointed as Meta’s first CISO in 2022, had spent over a decade at the company, leading product security and integrity efforts long before the formalization of the CISO office.
Rosen announced his decision to depart in June 2024. While his future plans have not been explicitly detailed, he has indicated an intention to serve as an advisor to emerging organizations and leaders, potentially pivoting toward a career in mentorship and governance. His legacy at Meta includes the navigation of the company through several high-profile data privacy scandals and the integration of advanced encryption standards across its messaging platforms.
The Changing Landscape of Cybersecurity Leadership
The appointment of Keren comes at a time when the role of the CISO is undergoing a fundamental transformation. No longer confined to the "server room," today’s security leaders are increasingly involved in board-level discussions regarding digital strategy, ethical AI, and regulatory compliance.
The Rise of AI-Centric Security
Industry experts observe that companies like Meta are shifting their hiring criteria. The modern CISO must possess a deep understanding of machine learning operations (MLOps) and the unique vulnerabilities associated with Large Language Models (LLMs). As AI tools are integrated into the product lifecycle, the security perimeter now extends to the training data, the model architecture, and the inference engines themselves.
Keren’s background at PayPal and Qualtrics suggests a focus on risk-based security—the ability to identify which assets are truly mission-critical and to allocate security resources accordingly. In an environment where the threat surface includes billions of individual user accounts, this level of analytical rigor is essential.
Cross-Industry Movement
Keren’s move is part of a broader trend of "musical chairs" within the CISO community. Major tech firms are increasingly recruiting from the finance and enterprise software sectors, seeking leaders who are accustomed to strict compliance environments and high-availability systems.
For instance, the recent appointment of Philip Martin at Uber reflects a similar trend—tech giants are prioritizing leaders with a proven track record of managing large-scale, complex environments. These shifts underscore the reality that cybersecurity is no longer a niche technical field but a pillar of corporate stability and shareholder value.
Implications for Meta’s Future
As Keren assumes his duties, several key areas are expected to dominate his immediate agenda.
1. Trust Infrastructure for AI
Meta has been aggressive in its pursuit of open-source AI development. While this strategy fosters innovation, it also creates unique security challenges regarding the dissemination of powerful models. Keren will likely oversee the implementation of more robust "red teaming" protocols and guardrails to ensure that Meta’s AI models are not utilized for malicious purposes at scale.
2. Regulatory Compliance and Privacy
Meta remains under constant scrutiny from international regulators, including the European Union’s GDPR enforcers and the U.S. Federal Trade Commission. Keren’s experience in the highly regulated fintech space will be an asset in managing these relationships, particularly as the company navigates emerging AI-specific regulations.
3. Strengthening User Confidence
The "human work of earning confidence," as Keren described it, involves moving beyond technical patches to proactive transparency. Meta’s success in the coming years will depend on its ability to convince users—and lawmakers—that its platform is a safe environment for the next generation of AI-integrated digital interactions.
Conclusion: A Critical Juncture
The transition from Guy Rosen to Assaf Keren is more than just a change in personnel; it is a signal of Meta’s intent to professionalize its security posture for the AI era. Keren enters the company with a mandate that is as broad as it is demanding. He must balance the company’s push for innovation with the non-negotiable requirement of protecting user data and maintaining the integrity of the platform’s underlying systems.
As the cybersecurity industry watches closely, Keren’s success will likely serve as a blueprint for other tech giants navigating the same turbulent waters. In the words of the new CISO himself, the scale of the challenge is massive, but the opportunity to build a secure foundation for the future of digital communication is equally significant.
For those following the cybersecurity job market, this transition highlights the ongoing demand for leaders who can bridge the gap between complex software engineering and high-stakes corporate strategy. As Meta continues to evolve, the security of its global ecosystem will remain a primary metric by which its long-term viability is measured.
For more information on executive movements in the cybersecurity space, readers are encouraged to consult the latest reports from industry analysts and security tracking platforms.
