Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity

3M•Maplewood, MN

9d•Onsite

About The Position

The Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity provides global legal advice to 3M stakeholders on technology, artificial intelligence, cybersecurity, privacy, data protection, and data laws. The role advises on AI governance and responsible AI use, oversees the global external messaging applications governance program, and translates evolving legal and regulatory obligations into practical guidance for business and technology teams. The position partners with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance, and responsible AI requirements throughout technology design, procurement, deployment, monitoring, and lifecycle management. It supports major enterprise technology transformations, including ERP modernization, cloud migration, and digital platform initiatives, and advises on hyperscale cloud environments, digital initiatives, cybersecurity matters, privacy and data protection compliance, technology contracts, and third-party risk. The role monitors global legal developments, prepares guidance and risk assessments for leaders and working groups, and coordinates with regional counsel, outside counsel, and enterprise risk, compliance, audit, and government affairs stakeholders. It also manages, develops, and mentors a global team of legal professionals. This is an on-site role at the 3M Center in Maplewood, Minnesota, requiring at least four days per week on site. Travel may include up to 10% domestic and international travel. Relocation may be authorized.

Requirements

Juris Doctor degree or higher, completed and verified before the start date.
At least 10 years of legal counsel experience in a private, public, government, or military environment.
Membership in at least one U.S. state bar in good standing.
Legally authorized to work in the country of employment without employment visa sponsorship.

Nice To Haves

Prior in-house experience in a Fortune 500, multinational, or technology-intensive company.
Experience advising on AI governance frameworks and responsible AI, including generative AI, machine learning, model risk, algorithmic accountability, transparency, human oversight, and AI lifecycle controls.
Experience supporting AI adoption in hyperscale cloud environments and advising on related cybersecurity, privacy, compliance, and technology governance matters.
Experience advising on large-scale ERP transformation programs, cloud migrations, and enterprise technology modernization initiatives.
Experience with cybersecurity incident response, cybersecurity governance, product security lifecycle management, regulatory inquiries, third-party technology risk, cloud services, and enterprise technology transactions.
Familiarity with global laws and frameworks such as GDPR, UK GDPR, China PIPL, Brazil LGPD, U.S. state privacy laws, HIPAA, NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27001, and EU AI Act.
Professional certifications such as CIPP, CIPM, CIPT, AIGP, CISSP, or other relevant privacy, AI governance, cybersecurity, or information governance credentials.
Experience working with executive committees, enterprise governance bodies, regulators, auditors, procurement teams, and technology leadership.

Responsibilities

Provide global legal advisory services to IT, cybersecurity, and business stakeholders on technology, artificial intelligence, cybersecurity, privacy, data protection, and data laws.
Advise on the development, implementation, and ongoing enhancement of 3M’s AI governance framework, including policies, standards, controls, risk assessments, escalation pathways, and oversight mechanisms.
Oversee the global external messaging applications governance program, including policies, standards, controls, processes, and mechanisms for appropriate business communications governance.
Translate complex and evolving global legal and regulatory requirements into actionable guidance for technology, cybersecurity, business, procurement, human resources, ethics, and compliance teams.
Partner with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance, and responsible AI requirements into technology design, procurement, deployment, monitoring, and lifecycle management.
Advise on legal, regulatory, and governance matters involving hyperscale cloud environments and enterprise adoption of AI, machine learning, and advanced analytics.
Support enterprise technology transformations, including ERP modernization, cloud migration, and digital platform initiatives, by developing practical, risk-based legal solutions.
Support governance and compliance for digital initiatives involving cloud services, websites, accessibility, software platforms, ERP systems, data analytics, automation, generative AI, machine learning, digital products, and emerging technologies.
Advise on cybersecurity legal matters, including incident response readiness, regulatory notification considerations, security governance, third-party risk, vulnerability management, and legal risk mitigation.
Oversee legal support for privacy and data protection compliance programs, including privacy-by-design, data protection impact assessments, data processing agreements, cross-border data transfers, data subject rights, records of processing, and data minimization.
Monitor and assess global legal developments, enforcement trends, and regulatory expectations involving AI, cybersecurity, privacy, data protection, data localization, and sector-specific digital requirements.
Advise on digital, AI, cybersecurity, privacy, and data-related contract terms, supplier diligence, technology transactions, data-sharing arrangements, and third-party risk controls.
Prepare and deliver legal guidance, executive updates, risk assessments, training, and governance materials for senior leaders, committees, and cross-functional working groups.
Manage, develop, and mentor a global team of legal professionals.
Coordinate with regional counsel, 3M Legal Affairs colleagues, outside counsel, and enterprise risk, compliance, audit, and government affairs stakeholders.
Comply with corporate policies, procedures, and security standards while performing assigned duties.
Contribute to 3M’s Environmental Health and Safety culture by following safety policies, identifying hazards, and engaging in continuous improvement.