Andrew Tannenbaum

Practice Areas

Andrew Tannenbaum is Global Co-Head of Cybersecurity.

Andrew is a leading cybersecurity and technology lawyer with more than two decades of experience in financial services, technology, government, and national security. With his unique background combining senior in-house and government roles, Andrew brings a deep and first-hand understanding of the challenges clients face navigating high-stakes and emerging technology risks in highly regulated industries. As Global Co-Head of Cybersecurity, his practice includes advising global enterprises on some of the largest and most complex cybersecurity and data incidents, as well as end-to-end governance and compliance for AI, privacy, and cyber programs.

Prior to joining A&O Shearman, Andrew served as General Counsel for Barclays Execution Services, the global services company of the Barclays Group. In that role, Andrew led Barclays’ legal teams worldwide across all areas of technology and operations, including cyber, data privacy, AI, emerging technologies, intellectual property, operational resilience, and crisis management.

Andrew has pioneered cybersecurity and technology roles for lawyers at the top levels of industry and government. He was the first Chief Cybersecurity Counsel at IBM, where he founded one of the earliest global corporate cyber legal teams, and he was Barclays’ first global legal head of cyber, data, and AI. During a decade in government, Andrew served as the National Security Agency’s first Deputy General Counsel for Cyber and held prominent positions in the White House and Department of Justice. He has overseen hundreds of cyber incidents and data breach investigations at all levels of severity, guiding clients through cross-border crisis response and regulatory investigations.

A trusted advisor to boards, C-suite executives, general counsels, and CISOs, Andrew provides practical, business-focused counsel in highly dynamic and operational environments. Recognized for his thought leadership, Andrew teaches cybersecurity, privacy, and government surveillance law at Columbia Law School, has testified before Congress on cybersecurity law, and has contributed to leading publications such as The Wall Street Journal and Harvard Business Review.