The Chertoff Group, a global security and growth advisory firm, has announced the appointment of three highly respected cybersecurity leaders Michael Johnson, Sammy Migues, and John Steven as senior advisors. This strategic expansion significantly strengthens the firm’s technical depth and reinforces its ability to support organizations navigating increasingly complex cyber risk, technology, and resilience challenges.
By bringing these seasoned professionals into its advisory network, The Chertoff Group continues to invest in top-tier expertise that blends private-sector innovation with deep government and national security experience. As cyber threats evolve and digital ecosystems grow more interconnected, the firm is positioning itself to deliver even more sophisticated, practical guidance to clients across industries.
“It is a pleasure to welcome these proven cybersecurity and safety professionals to our team of advisors. The depth and breadth of their collective expertise in the private sector and government will help our cybersecurity clients solve hard problems,” said Executive Chairman Michael Chertoff.
Cyber Technology Insights: Cybersecurity Trailblazer Marene Allison Joins Sicura as Strategic Advisor
Michael Johnson joins The Chertoff Group most recently from Meta, where he served as Chief Information Security Officer for Meta Financial Technologies (FinTech). In that role, he led a wide range of critical security functions, including FinTech product security, security engineering, AI security strategy, AI product security risk assessments, insider threat oversight, threat intelligence, and enterprise risk management. He also played a central role in cloud safeguarding and security risk quantification. Before Meta, Johnson served as Senior Vice President and CISO at Capital One. Earlier in his career, he held senior government positions, including CIO for the U.S. Department of Energy and Assistant Director for Intelligence Programs and National Security Systems at the White House Office of Science and Technology Policy, where he supported national-level technology and security initiatives.
Alongside Johnson, Sammy Migues brings a strong reputation as a cybersecurity technical leader with wide-ranging expertise across software security, governance and risk models, compliance frameworks, security metrics, threat modeling, DevSecOps, software supply chain protection, and digital transformation. Notably, Migues is a creator of the Building Security In Maturity Model (BSIMM), a widely recognized framework that helps organizations assess and mature their software security programs. Through this work, he has made a lasting impact on how enterprises measure and improve application security.
Cyber Technology Insights: SK Telecom Invests $500M in Cybersecurity to Strengthen 5G and Cloud Infrastructure
John Steven further deepens the firm’s advisory capabilities with decades of influence in software and cloud security. A pioneering voice in application security, Steven focuses on threat modeling, architectural risk analysis, and software-defined security governance, along with automation strategies that improve both efficiency and cyber resilience. Previously, as co-CTO of Cigital, he helped transform the organization into the largest and most influential application security firm in the industry, shaping best practices that are still widely used today.
Together, these appointments enhance The Chertoff Group’s comprehensive cybersecurity advisory services, which emphasize resilience built on threat-informed, tested, and business-aligned strategies. The firm supports clients through cybersecurity risk and maturity assessments, program development and implementation, product security initiatives, and preparedness planning, including exercises designed to strengthen real-world response capabilities. In addition, The Chertoff Group brings deep experience in helping organizations design and operate trust and safety programs that protect online platforms and digital communities.
With the addition of Johnson, Migues, and Steven, The Chertoff Group reinforces its commitment to delivering forward-looking cybersecurity and technology advisory services. Ultimately, the firm is better equipped to help clients anticipate emerging risks, modernize security programs, and build durable cyber resilience in an increasingly volatile digital landscape.
Cyber Technology Insights: Qubika Acquires Specialist Nashville-based Cybersecurity Firm, Nitra Security
To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com
