Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity

As Director and Assistant General Counsel, Global Privacy, AI and Cybersecurity at 3M, you will provide high-impact legal guidance that supports secure and compliant technology decisions across the enterprise. In this onsite role based in Maplewood, MN, you will help translate global privacy, data protection, AI governance, and cybersecurity requirements into practical direction for technology, business, procurement, HR, ethics, and compliance teams.

You will oversee governance programs and partner across functions to ensure legal and regulatory obligations are embedded into technology design, procurement, deployment, monitoring, and lifecycle management. The position also includes monitoring evolving enforcement and regulatory expectations related to AI regulation, cybersecurity, and privacy and data protection laws, along with advising on relevant contractual terms and third-party risk controls.

Role focus

• Provide global legal advisory to 3M IT, cybersecurity, and business stakeholders on technology, artificial intelligence, cybersecurity, privacy, data protection, and applicable data laws.
• Advise on the development, implementation, and ongoing enhancement of 3M’s AI governance framework, including policies, standards, controls, risk assessment processes, escalation pathways, and oversight mechanisms for responsible AI use.
• Oversee 3M’s global external messaging applications governance program, including policies, standards, controls, and processes for appropriate business communications governance measures.
• Translate complex and evolving global legal and regulatory requirements into actionable guidance for information technology, cybersecurity, global business services, procurement, human resources, ethics, compliance, and business teams.
• Partner with cross-functional leaders to embed legal, privacy, cybersecurity, technology governance, and responsible AI requirements into technology and operational processes.
• Advise on legal, regulatory, and governance matters involving hyperscale cloud environments to support secure, compliant, and responsible adoption of AI, machine learning, and advanced analytics.
• Support major enterprise technology transformations including ERP modernization, cloud migration, and digital platform initiatives, translating technical, operational, and security needs into practical, risk-based legal solutions.
• Support governance and compliance for enterprise digital initiatives such as cloud services, websites, accessibility, software platforms, ERP systems, data analytics, automation, generative AI, machine learning, digital products, and emerging technologies.
• Advise on cybersecurity legal matters, including incident response readiness, regulatory notification considerations, security governance, third-party risk, vulnerability management, and related legal risk mitigation strategies.
• Oversee legal support for privacy and data protection compliance programs, including privacy-by-design, data protection impact assessments, data processing agreements, cross-border data transfers, data subject rights, records of processing, and data minimization considerations.
• Monitor and assess global legal developments, enforcement trends, and regulatory expectations, including AI regulation, cybersecurity requirements, privacy and data protection laws, data localization rules, and sector-specific digital requirements.
• Advise on digital, AI, cybersecurity, privacy, and data-related contractual terms, supplier diligence, technology transactions, data sharing arrangements, and third-party risk controls.
• Prepare and deliver legal guidance, executive updates, risk assessments, training, and governance materials for senior leaders, committees, and cross-functional working groups.
• Manage, develop, and mentor a global team of legal professionals to ensure consistent legal support, effective prioritization, strong stakeholder service, and professional growth.
• Coordinate with regional counsel and 3M Legal Affairs colleagues, outside counsel, and enterprise risk, compliance, audit, and government affairs stakeholders to support consistent legal positions and effective risk management.

Requirements

• Juris Doctor (JD) degree or higher, completed and verified prior to start.
• Ten (10) years of legal counsel experience in a private, public, government, or military environment.
• Member of at least one state bar (United States) in good standing.

Location and working model

• Maplewood, MN onsite (3M Center), with an on-site working model requiring at least four days per week at the site.
• Travel may include up to 10% domestic/international.
• Relocation may be authorized.

Compensation and benefits

• Expected compensation range: USD 250,253 - 305,864 per year, including base pay plus variable incentive pay, if eligible.
• Specific pay may vary based on relevant knowledge, training, skills, work location, and experience.
• Additional benefits may be available, including Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences, and Retirement Benefits.

For detailed benefits information, visit: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/

Additional information for US applicants

• Applicable posting window: 10/13/2026 to 11/12/2026, or until filled.
• All US-based 3M full time employees will need to sign an employee agreement as a condition of employment covering use of 3M Confidential Information and Trade Secrets, conflicts of interest, invention assignment, and potential obligations related to not competing or soliciting (for Job Grade 7 or equivalent and above), during employment and for a period after leaving 3M.
• Safety is a core value: all employees are expected to support a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and participating in continuous improvement.
• 3M requires reviewing the Terms of Use before using the website and submitting an application; access and application use are conditioned on acceptance and compliance.