Why this persona fits the audience
Runs point on customer security questionnaires, technical RFPs, and due-diligence forms for a 180-person payroll software company in Boston. She collects policy language from Confluence, evidence from Jira and GitHub, and gets engineering and legal sign-off in shared docs before replies go out.
- Age: 37
- Location: Boston, MA, USA
- Occupation: Security Compliance Manager
- Income: USD 158k base + bonus
- Education: Master's in information systems
- Company size: 180
- Years in role: 4
“My goal is to build systems that are so robust, they feel invisible until you absolutely need them.”
Kristina Pollich has carved out a niche in the demanding world of B2B SaaS security compliance. Originally from the Midwest, she pursued her Master's in Information Systems at a university in Boston, drawn by the city's burgeoning tech scene and academic rigor. She landed her first compliance role at a cybersecurity firm, where she honed her skills in navigating complex regulatory landscapes and developing security policies. Four years ago, she joined her current company, a rapidly scaling payroll software provider, seeing an opportunity to build out their compliance function from the ground up. Her role as Security Compliance Manager involves being the primary owner of customer security questionnaires, technical RFPs, and due-diligence forms, a task that demands extreme accuracy and meticulous attention to detail. She operates within a 180-person organization where her ability to collect policy language from Confluence, gather technical evidence from Jira and GitHub, and secure crucial sign-offs from engineering and legal teams in shared documents is paramount. Kristina’s approach is deeply rooted in her conscientiousness, always striving for audit readiness and cross-functional clarity. She recently championed a project to standardize the way security evidence is tagged within Jira, a move designed to drastically reduce the time spent gathering information for future questionnaires. This initiative, while initially met with some engineering resistance, is projected to save her team dozens of hours per quarter. She views time as a critical resource, both her own and that of her colleagues, and is constantly seeking ways to optimize workflows. Her income reflects her specialized expertise and the high stakes of her role, allowing her a comfortable lifestyle focused on well-being and experiences rather than overt displays of status. She is highly respected by her peers for her principled stand on security and her ability to translate complex technical requirements into understandable business language.
Background & daily life
A day in their life
Kristina's weekday typically begins with an early morning run, followed by a quick breakfast and review of urgent emails. Her workday involves a cycle of deep-focus work on drafting responses to complex security questionnaires, collaborating with engineering leads to gather specific technical evidence from code repositories and issue trackers, and scheduling/leading review meetings with legal. She meticulously documents all communication and approvals in shared drives, ensuring a clear audit trail. Lunch is usually a prepped meal eaten at her desk while reviewing industry news or internal policy updates. The afternoon might involve a vendor call or a cross-functional meeting to discuss process improvements, ending with a final sweep of her inbox before heading home.
Lifestyle
Kristina lives with her husband in a recently renovated condo in Somerville, appreciating its proximity to Boston's amenities and trails. She wakes early for her trail runs along the Charles River, which helps her de-stress and clear her head before the workday. Her evenings are often dedicated to meal prepping for the week, ensuring healthy and efficient lunches and dinners. She and her husband enjoy exploring new breweries on weekends and occasionally host small gatherings. While generally frugal, she prioritizes experiences and investments in her home and well-being. She’s conscious of her finances, aiming to stay within budget while still enjoying life's pleasures.
Work life
Kristina's days are a tightrope walk between proactive compliance work and reactive customer demands. She spends significant time translating intricate security policies into digestible answers for RFPs and questionnaires, meticulously pulling evidence from Jira, Confluence, and GitHub. Her role necessitates constant collaboration; she relies heavily on engineering and legal teams for sign-offs, often navigating differing priorities and timelines. The pressure to maintain audit readiness while scaling the company's security posture is a constant undercurrent, driving her to seek more efficient, reliable methods for managing this critical function.
Relationships
Kristina is married to David, a software engineer, with whom she shares a collaborative and supportive dynamic. Her closest friends are a small group from her graduate program, with whom she maintains regular contact. Within her company, she has built strong working relationships with key individuals in engineering and legal, relying on their expertise and cooperation for her daily tasks.
How they decide
Kristina is highly analytical and research-driven. She prefers to gather all available data, weigh pros and cons systematically, and consult with relevant stakeholders before making a decision. She values evidence and logic, often creating checklists or comparison matrices to ensure thoroughness. She is not impulsive and typically requires time to process information and feel confident in her choices.
How they sound
Speaks clearly and deliberately, with a measured cadence. Her tone is professional and informative, avoiding jargon where possible unless speaking to a technical audience. She uses precise language and is careful not to overstate or speculate. She might occasionally use phrases like 'from a compliance perspective' or 'to ensure auditability.'
Personality traits
- meticulous
- detail-oriented
- organized
- principled
- persistent
- calm under pressure
- thorough
- proactive
- systematic
Goals
- Achieve SOC 2 Type II certification for her company within the next fiscal year.
- Develop a more robust internal knowledge base for security documentation.
- Mentor a junior member of the compliance team.
- Complete a challenging trail race next fall.
- Contribute to refining the company's overall security strategy.
Problems & frictions
- Inconsistent policy documentation across different departments.
- Time-consuming manual data collection for security questionnaires.
- Balancing urgent customer requests with long-term compliance projects.
- Ensuring engineering and legal teams have bandwidth for timely reviews.
- Keeping up with rapidly evolving security threats and compliance frameworks.
Values
- accuracy
- reliability
- cross-functional clarity
- audit readiness
- process efficiency
Interests
- trail running
- contemporary fiction
- meal prep
- home organization
- local craft breweries
Media habits
- Listens to podcasts (e.g., 'This American Life', 'Security Now') during commutes and runs
- Reads industry newsletters (e.g., Dark Reading, SecurityWeek)
- Follows tech and compliance thought leaders on LinkedIn
- Occasional binge-watching of prestige dramas
- Subscribes to a daily news digest