Mai Kraft is a recognised cybersecurity expert and leader with extensive experience in technology and information security. She holds a Master’s degree in Cybersecurity from Tallinn University of Technology. Since August 2026, she has led the National Cyber Security Centre of Estonia (NCSC-EE) at the Estonian Information System Authority (RIA) and serves as RIA’s Deputy Director General for Cybersecurity.
In this role, Kraft leads efforts to strengthen the cyber resilience of the state and critical infrastructure, raise public awareness of cyber threats, and further develop the Estonian Information Security Standard (E-ITS). As Director of NCSC-EE, she is also responsible for the work of Estonia’s national CERT and the supervision department, which oversees compliance with the cybersecurity requirements established under Estonia’s Cybersecurity Act.
Prior to joining RIA, Kraft served for eight years as Chief Information Security Officer at Elisa Estonia, where she was responsible for the overall management of the company’s cybersecurity function. Her responsibilities included cybersecurity strategy, risk management, regulatory compliance, security incident management, and ensuring the effective operation of the information security management system across the organisation.