Meta has named Assaf Keren as its new Chief Information Security Officer, handing the Israeli cybersecurity veteran responsibility for defending one of the largest digital platforms on the planet. The appointment, reported by Calcalist, marks a significant leadership move at a company whose platforms — Facebook, Instagram, WhatsApp, and Threads — collectively serve more than three billion daily active users. For anyone tracking the steady rise of Israeli talent inside American tech giants, this is another data point that is hard to ignore, a trend well illustrated by AI cybersecurity cohort, where five of fifteen selected startups came from Israel.
Keren steps into a role that sits at the intersection of geopolitics, regulatory pressure, and an increasingly hostile threat landscape. Meta operates infrastructure that governments, advertisers, and two-thirds of the internet-connected world depend on daily — which makes the CISO position one of the most consequential security jobs in the technology industry.

Who Is Assaf Keren and Why Meta Wanted Him
Keren brings a resume that blends elite military intelligence experience with senior corporate security roles, a combination that has become a calling card for Israel’s top cybersecurity exports. Before joining Meta, he held a senior security leadership position at Amazon Web Services, where he was responsible for security strategy across AWS’s sprawling cloud infrastructure — an environment that handles workloads for millions of enterprise customers and government agencies worldwide. Prior to his time in the private sector, Keren served in an intelligence role in the Israel Defense Forces, the breeding ground for a disproportionate share of the world’s most sought-after security professionals.
That combination — Unit 8200-adjacent training, cloud-scale operational experience, and familiarity with adversarial nation-state tactics — is precisely what Meta needs right now. The company has faced persistent threats from state-sponsored actors attempting to exploit its platforms for influence operations, disinformation campaigns, and direct infrastructure probing. Placing someone with Keren’s profile in the top security seat signals that Meta is treating its threat environment as a strategic problem, not merely an engineering one.
What the CISO Job Actually Means at Meta’s Scale
The Chief Information Security Officer at Meta is not a compliance role. It is a war-room command position. Meta’s security organization covers everything from protecting user account integrity at billions-of-accounts scale to defending the physical and logical security of data centers spread across North America, Europe, and Asia. The CISO also liaises directly with regulators in the European Union, where the Digital Markets Act and GDPR impose stringent data-handling obligations that carry fines of up to four percent of global annual revenue for violations.

The timing of the appointment also matters. Meta has been aggressively expanding its AI infrastructure, committing to spend up to sixty-five billion dollars on capital expenditure in 2025 alone, much of it directed at data centers and AI compute. Each new cluster of GPU servers, each new model deployment, each new agentic feature rolled into Meta AI represents a fresh attack surface. Keren will need to build security practices that scale alongside that investment — no small ask when the underlying technology is evolving faster than most threat models can keep up with. The pressure is compounded by the fact that AI systems themselves are becoming vectors, a reality underscored by recent incidents involving agents breaching platforms during unsupervised operations.
Meta has not publicly detailed the organizational structure Keren will inherit or which existing security teams will report directly to him. What is clear is that his appointment reflects a broader industry pattern: as the threat surface expands and regulatory scrutiny intensifies, the biggest platforms are reaching for executives with intelligence-community roots and cloud-scale operational credentials. Keren has both. Meta now gets to find out whether that combination is enough.
