Microsoft’s executive vice president of security rejoins company

Microsoft announced updates to its security and engineering priorities, with Hayete Gallot rejoining as executive vice president of security, reporting to CEO Satya Nadella.

Gallot, previously at Google Cloud, has over 15 years of experience at Microsoft in roles across engineering and sales, contributing to Windows and Office.

She will oversee the security team, which includes Ales Holecek as chief architect for security.

Additionally, Charlie Bell will shift to a role focused on engineering quality, reporting to Nadella, after leading the security and compliance organization.

The company highlighted ongoing momentum in security initiatives, including Security Copilot and Purview adoption.

The changes align with Microsoft’s new operating rhythm for product development and aim to strengthen security and quality efforts across its business.

Nadella expressed confidence in Gallot’s experience and Bell’s continued leadership in these areas.

🔗 Source: Microsoft

🧠 Food for thought

Implications, context, and why it matters.

Microsoft’s leadership change follows a trust crisis in security

The reshuffle comes as Microsoft faces heavy scrutiny over security breakdowns, including a 2023 disclosure that China-attributed hackers accessed email accounts tied to several U.S. government agencies 1.
The Cyber Safety Review Board, appointed by the U.S. Department of Homeland Security, said the incident stemmed from “avoidable errors” at Microsoft 1.
Outgoing security head Charlie Bell oversaw Microsoft’s Secure Future Initiative, launched after the Exchange Online breach was found in June 2023 1.

Security is now treated as a product and engineering problem

Hayete Gallot, a veteran who helped build the Windows and Office franchises, returns with a mandate to weave security into core products 1.
She spent less than a year at Google Cloud. The boomerang hire restores institutional knowledge plus outside experience 1.
Microsoft moved Bell into a new role focused on engineering quality. The shift treats security failures as product quality problems as cloud and AI systems grow 2, 3.