
Elaine Ma
@elainema
Cybersecurity ECO-System CTO building AI security agents and cross-border AI safety advisory services.
What I'm looking for
I'm pioneering AI safety advisory and consulting work as Cybersecurity ECO-System CTO, including cross-border case studies and a parameter-level AI Agent with patented architecture. I also provide AI governance services, security assessments, and training to help companies deploy AI safely.
At MetLife China, I designed an enterprise AI Security-by-Design framework and a governance agent framework for model approvals, bias testing, and adversarial evaluation. In a 2026 pilot, I designed and built a multi-agent SOC system that reduced false positives by 87% and brought MTTD from 45 minutes to under 4 minutes.
As Partner/Advisory Lead/AI export at Protiviti, I advised Hong Kong SFC-licensed digital asset platforms and designed security frameworks for blockchain clients. For Luckin Coffee, I secured a real-time RAG system and established continuous red teaming for LLM outputs.
Earlier, I built Chanel China's SOC, incident response, application security, and audit capabilities from the ground up, raising security maturity from Level 2 to Level 4. Across roles at Lululemon, HSBC, Amazon AWS, Intel, and Cisco, I've worked on regional privacy and compliance, cloud and application security, OT/ICS protection, and security operations.
Experience
Work history, roles, and key accomplishments
Cybersecurity Eco-System CTO
Cybersecurity Eco-System
Jun 2026 - Present (3 months)
Pioneered new risk advisory and consulting offering in AI safety, establishing first-of-their-kind cross-border case studies. Building parameter-level AI agent with patented architecture and delivering AI governance services.
Security Head (CISO)
MetLife China
Feb 2025 - Jun 2026 (1 year 4 months)
Led 24/7 SOC, VM, DevSecOps, and IT audit with direct board-level reporting. Architected enterprise AI Security-by-Design framework and developed agentic AI SOC architecture, reducing false positives and MTTR significantly.
Partner/Advisory Lead/AI Expert
Protiviti
Apr 2023 - Feb 2025 (1 year 10 months)
Advised HK SFC-licensed digital asset platforms on SOC2, MAS TRM, AML/KYC compliance, and cybersecurity frameworks. Designed hybrid SOC architecture and AI/blockchain governance frameworks, reducing client alert fatigue and MTTD.
China CISO
Chanel
Nov 2020 - Apr 2023 (2 years 5 months)
Built SOC, IR, AppSec, and audit from ground up, elevating security maturity from Level 2 to Level 4 in 2.5 years. Remediated 100+ critical audit findings and established forensic readiness and vendor SSDLC program.
APAC Cybersecurity Lead / DPO
Lululemon
Feb 2019 - Nov 2020 (1 year 9 months)
Served as DPO for 8 APAC countries, implementing PDPA/GDPR/MLPS and AML-aligned data governance with zero regulatory fines. Built unified VM platform with risk-based prioritization achieving 48-hour SLA for critical fixes.
APAC Cybersecurity Senior Consultant
Adidas
Feb 2018 - Feb 2019 (1 year)
Embedded SAST/DAST/SCA into CI/CD for e-commerce and mobile platforms. Conducted quarterly purple team exercises to validate detection against modern threat actor TTPs, reducing post-release defects by 30%.
Senior Security Manager
HSBC
Nov 2014 - Feb 2018 (3 years 3 months)
Led security operations across 6 APAC markets, reducing data leakage incidents by 50%. Drove MAS TRM and HKMA compliance and integrated security gates into core digital banking apps, including early-stage crypto custody pilots.
Security Lead
AWS & Kindle (Amazon China)
Aug 2013 - Nov 2014 (1 year 3 months)
Secured 200+ workloads to PCI DSS Level 1 and designed application security framework reducing critical findings by 40%.
IoT Security Designer (Co-Founder)
Wearable Startup
Nov 2012 - Aug 2013 (9 months)
Designed embedded security, secure boot, and GDPR-ready health data architecture for IoT devices.
Product Security Engineer / IoT Manager
Intel
Oct 2008 - Nov 2012 (4 years 1 month)
Managed OT/ICS/SCADA security for semiconductor fabs, reducing OT vulnerabilities by 35% via segmentation and BCP implementation.
SOC Operation Manager
Cisco
Jul 2008 - Sep 2008 (2 months)
Core SOC member for 2008 Beijing Olympics, handling 50+ incidents with zero service disruption.
Product Manager & Application Engineer
ICD Security
Feb 2005 - Mar 2008 (3 years 1 month)
Product management and application engineering role at a security company.
Software Engineer / Web Designer
Kingde Device
Mar 2003 - Feb 2005 (1 year 11 months)
Software engineering and web design role.
Education
Degrees, certifications, and relevant coursework
Massachusetts Institute of Technology
AI Product Design, AI Product Design
Completed AI Product Design program at MIT in 2022.
BI Norwegian Business School
MBA, Business Administration
Earned an MBA from BI Norwegian Business School in 2016.
Beijing Institute of Technology
Master of Science, Software Engineering
Earned a Master of Science in Software Engineering from Beijing Institute of Technology in 2015.
China Agricultural University
Bachelor of Science, Science
Earned a Bachelor of Science from China Agricultural University in 2003.
Availability
Location
Authorized to work in
Salary expectations
Interested in hiring Elaine?
You can contact Elaine and 90k+ other talented remote workers on Himalayas.
Message ElaineGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
