Somewhat interesting is the fact that the previous Facebook CSO was Joe Sullivan (now CSO at Uber), who did not have an "IT security" background at all; most of his career is oriented towards law (he has a J.D. after all ;))<p>Contrast this to Alex Stamos, who's given many presentations at Defcon/Blackhat, co-founded iSEC, EE/CS background, and it seems a bit of a mentality shift for Facebook.