The people who set the standard.
A leadership team and advisory board drawn from across security, research, and the industries we protect.
Executive management
Leadership.
Jennifer “Sunshine” Steffens
Chief Executive Officer. Spearheads IOActive's global operations and strategic vision. Recognized industry leader — SC Magazine Reboot Leadership Award (2017), CV Magazine IT Security CEO of the Year (2018); earlier at Sourcefire and NFR Security.
Robert Maughan
SVP, Services. Owns IOActive's global services delivery, customer satisfaction, and quality assurance. 20+ years in information security and IT operations; has managed global teams across eight countries. CISSP.
Mark Rossiter
Global SVP, Marketing & Sales. Enterprise software and cybersecurity sales leader; previously IBM, Oracle, Gartner, Ivanti, WhiteHat, and Bugcrowd, building teams across North America, EMEA, and APAC.
Dave Litchfield
SVP, EMEA Commercial Strategy. Former Royal Marine Commando (28 years, WO1, Meritorious Service Medal). Joined IOActive in 2018; established the UK's largest hardware lab and helped drive the OCP S.A.F.E. selection. Co-founded NGS Software.
Andrew McDonnell
Field CISO. Drives growth and strategic relationships. 20+ years across security strategy, delivery, and business development, supporting clients from under ten employees to the Fortune 10.
Mike Brouillette
VP, Finance. Joined in 2024; leads financial strategy and planning. Former CFO at Winmo; CPA with expertise in financial reporting, internal controls, and budgeting.
Jim Frye
VP, People. Leads the well-being and growth of IOActive's people; HR strategy and talent development. Previously at Pymetrics, Stadium Goods, and Attune Insurance.
Julie Simmons
General Counsel. Oversees global legal and governance. Commercial contracting, data privacy, IP, and corporate governance; previously at Stairwell, Red Canary, Webroot, and Carbonite. JD & MBA, University of Colorado.
John Sheehy
Senior Advisor. Works with clients in the Embedded Systems practice (vehicles, ICS, medical devices, semiconductors, smart cities) and leads Advisory Services. 20+ years in system architecture and information security.
Advisory board
Guided by the people who built the industry.
Joshua Pennell
Founder & Chairman of the Board. Founded IOActive in 1998 and has spent more than two decades shaping modern cybersecurity. Based in Monaco; active with ISSA UK and the City of London Livery.
Steve Wozniak
Co-founder, Apple. Silicon Valley icon and philanthropist; received the National Medal of Technology (1985) and was inducted into the Inventors Hall of Fame (2000).
Jim Reavis
Co-founder & CEO, Cloud Security Alliance. Entrepreneur, writer, and strategist; founded SecurityPortal in 1998; President of Reavis Consulting Group.
Cesar Cerrudo
Founder & CEO, Argeniss. Argeniss was acquired by IOActive; Cesar was formerly CTO of IOActive Labs. World-renowned researcher with 50+ vulnerabilities found in Microsoft products.
David LeBlanc
Security architect & author. Founding member of Microsoft's Trustworthy Computing Initiative; author of the “Writing Secure Code” series. Ph.D., Georgia Tech.
Ian Cook
Advisory Board. IT security leader, researcher, and intelligence analyst with 30 years applying intelligence procedures to corporate security risk; long-standing FIRST member.
Randolph Barr
Advisory Board. CISO of Aryaka Networks; former CSO of Qualys and WebEx, and Information Security Officer at Yodlee.
Vanessa Pegueros
Board director & former CISO. 30+ years in software and security; former Chief Trust & Security Officer at OneLogin and CISO at DocuSign. MBA, Stanford.