Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity

3M•Maplewood, MN

1d•$250,253 - $305,864•Onsite

About The Position

This position provides an opportunity to transition from other private, public, government or military experience to a 3M career. As a Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity, you will have the opportunity to tap into your curiosity and collaborate with some of the most innovative people around the world. Here, you will make an impact by: Provide global legal advisory services to 3M’s IT, cybersecurity and business stakeholders on applicable technology, artificial intelligence, cybersecurity, privacy, data protection and data laws. Advise on the development, implementation and ongoing enhancement of 3M’s AI governance framework, including policies, standards, controls, risk assessment processes, escalation pathways and oversight mechanisms for responsible AI use. Oversee 3M’s global external messaging applications governance program, including policies, standards, controls, processes and mechanisms for appropriate business communications governance measures. Translate complex and evolving global legal and regulatory requirements into actionable guidance for information technology, cybersecurity, global business services, procurement, human resources, ethics, compliance and business teams. Partner with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance and responsible AI requirements into technology design, procurement, deployment, monitoring and lifecycle management processes. Advise on legal, regulatory and governance matters involving hyperscale cloud environments to support secure, compliant and responsible adoption of AI, machine learning and advanced analytics across the enterprise. Support major enterprise technology transformations, including ERP modernization, cloud migration and digital platform initiatives, translating complex technical, operational and security requirements into practical, risk-based legal solutions. Support governance and compliance for enterprise digital initiatives, including cloud services, websites, accessibility, software platforms, ERP systems, data analytics, automation, generative AI, machine learning, digital products and emerging technologies. Advise on cybersecurity legal matters, including incident response readiness, regulatory notification considerations, security governance, third-party risk, vulnerability management and related legal risk mitigation strategies. Oversee legal support for privacy and data protection compliance programs, including privacy-by-design, data protection impact assessments, data processing agreements, cross-border data transfers, data subject rights, records of processing and related data minimization considerations. Monitor and assess global legal developments, enforcement trends and regulatory expectations, including AI regulation, cybersecurity requirements, privacy and data protection laws, data localization rules and sector-specific digital requirements. Advise on digital, AI, cybersecurity, privacy and data-related contractual terms, supplier diligence, technology transactions, data sharing arrangements and third-party risk controls. Prepare and deliver clear legal guidance, executive updates, risk assessments, training and governance materials for senior leaders, committees and cross-functional working groups. Manage, develop and mentor a global team of legal professionals, ensuring consistent global legal support, effective prioritization, strong stakeholder service and professional growth. Coordinate with regional counsel and 3M Legal Affairs colleagues, outside counsel and enterprise risk, compliance, audit and government affairs stakeholders to support consistent legal positions and effective risk management.

Requirements

Juris Doctor degree or higher (completed and verified prior to start)
Ten (10) years of legal counsel experience in a private, public, government or military environment
Member of at least one state bar (United States) in good standing
Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Nice To Haves

Prior in-house experience in a Fortune 500, multinational or technology-intensive company.
Experience advising on AI governance frameworks, responsible AI use, generative AI, machine learning, model risk, algorithmic accountability, transparency, human oversight and AI lifecycle controls.
Experience supporting AI adoption within hyperscale cloud environments and advising on associated cybersecurity, privacy, compliance and technology governance considerations.
Experience advising on large-scale ERP transformation programs, cloud migrations and enterprise technology modernization initiatives.
Experience with cybersecurity incident response, cybersecurity governance, product security lifecycle management, regulatory inquiries, third-party technology risk, cloud services and enterprise technology transactions.
Familiarity with global laws and frameworks such as GDPR, UK GDPR, China PIPL, Brazil LGPD, U.S. state privacy laws, HIPAA, NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27001, EU AI Act and other emerging AI, data and cybersecurity requirements.
Professional certifications such as CIPP, CIPM, CIPT, AIGP, CISSP or other relevant privacy, AI governance, cybersecurity or information governance credentials.
Experience working with executive committees, enterprise governance bodies, regulators, auditors, procurement teams and technology leadership.

Responsibilities

Provide global legal advisory services to 3M’s IT, cybersecurity and business stakeholders on applicable technology, artificial intelligence, cybersecurity, privacy, data protection and data laws.
Advise on the development, implementation and ongoing enhancement of 3M’s AI governance framework, including policies, standards, controls, risk assessment processes, escalation pathways and oversight mechanisms for responsible AI use.
Oversee 3M’s global external messaging applications governance program, including policies, standards, controls, processes and mechanisms for appropriate business communications governance measures.
Translate complex and evolving global legal and regulatory requirements into actionable guidance for information technology, cybersecurity, global business services, procurement, human resources, ethics, compliance and business teams.
Partner with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance and responsible AI requirements into technology design, procurement, deployment, monitoring and lifecycle management processes.
Advise on legal, regulatory and governance matters involving hyperscale cloud environments to support secure, compliant and responsible adoption of AI, machine learning and advanced analytics across the enterprise.
Support major enterprise technology transformations, including ERP modernization, cloud migration and digital platform initiatives, translating complex technical, operational and security requirements into practical, risk-based legal solutions.
Support governance and compliance for enterprise digital initiatives, including cloud services, websites, accessibility, software platforms, ERP systems, data analytics, automation, generative AI, machine learning, digital products and emerging technologies.
Advise on cybersecurity legal matters, including incident response readiness, regulatory notification considerations, security governance, third-party risk, vulnerability management and related legal risk mitigation strategies.
Oversee legal support for privacy and data protection compliance programs, including privacy-by-design, data protection impact assessments, data processing agreements, cross-border data transfers, data subject rights, records of processing and related data minimization considerations.
Monitor and assess global legal developments, enforcement trends and regulatory expectations, including AI regulation, cybersecurity requirements, privacy and data protection laws, data localization rules and sector-specific digital requirements.
Advise on digital, AI, cybersecurity, privacy and data-related contractual terms, supplier diligence, technology transactions, data sharing arrangements and third-party risk controls.
Prepare and deliver clear legal guidance, executive updates, risk assessments, training and governance materials for senior leaders, committees and cross-functional working groups.
Manage, develop and mentor a global team of legal professionals, ensuring consistent global legal support, effective prioritization, strong stakeholder service and professional growth.
Coordinate with regional counsel and 3M Legal Affairs colleagues, outside counsel and enterprise risk, compliance, audit and government affairs stakeholders to support consistent legal positions and effective risk management.
Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties.
All employees are expected to contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.