Skip to content
CISO Spotlights

Career profile

Assaf Keren

Chief Information Security Officer, Meta

Status
Current role, per sources checked 27 September 2026
Appointed
July 2026
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

Assaf Keren is the chief information security officer of Meta, a post SecurityWeek reported him taking on in an announcement made on a Wednesday, without the article giving a specific calendar date. Before Meta, he was senior vice president and chief security officer at Qualtrics.

Career path

SecurityWeek dates Keren's move to Qualtrics to March 2024, following nine years at PayPal, where he held a range of leadership roles including CISO. The RSA Conference's own expert page places the Qualtrics move in early 2024 and says he joined specifically to build the company's security function. That same RSA bio credits his PayPal tenure with reinforcing the payments company's standing as a secure and trusted platform, and says his career has also touched the military, government and defense sectors alongside technology startups before he reached strategic leadership.

Qualtrics' own author page puts a number on that history, crediting Keren with more than 20 years of experience building trusted technology platforms and services, and it too names PayPal CISO as his most recent post before Qualtrics.

Remit at Qualtrics and public writing

At Qualtrics, Keren's team was responsible for evolving and strengthening product security, keeping the company compliant with regulations across its markets, and partnering with security teams at its customer base. The same Qualtrics page lists an article attributed to him, titled The real security risk in AI is wrong decisions made with confidence, alongside a company press piece called Our Approach to Security in an AI-first World.

On taking the Meta role, Keren described it in his own words: "The role brings together everything I’ve spent my career on: security, systems, and the human work of earning confidence."

None of the three sources reviewed here describes the scope of his new Meta responsibilities in the same detail they give his Qualtrics and PayPal work, so this profile does not speculate on that scope beyond the title itself.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · published 23 July 2026 · checked 27 September 2026 · tier B
  2. 2.
    RSA Conferencersaconference.com · undated page · checked 27 September 2026 · tier A
  3. 3.
    Qualtricsqualtrics.com · undated page · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.