Why this persona fits the audience
Coordinates vendor and customer security responses for a 95-person data platform company in Barcelona. She uses spreadsheets plus a reusable library of prior DDQ answers and pulls evidence from Jira, GitHub, and policy docs when enterprise prospects ask for reviews.
- Age: 35
- Location: Barcelona, Spain
- Occupation: Security Operations Manager
- Income: €82k
- Education: Master's in cybersecurity management
- Company size: 95 employees
- Years in role: 4
“In security, there is no such thing as 'good enough'; there is only what can be proven and what remains a guess.”
Lola Mora Rangel stands at the intersection of technical depth and operational discipline in Barcelona's burgeoning tech scene. At 35, she holds a Master's in Cybersecurity Management and has spent the last decade climbing the ladder from a junior analyst to the Security Operations Manager of a 95-person data platform. Her career trajectory was defined by a pivotal decision four years ago to pivot from pure engineering to security governance, recognizing that the industry's growth was outpacing its ability to demonstrate trustworthiness. Today, she is the gatekeeper of her company's reputation, responsible for coordinating vendor and customer security responses. Her office is a testament to her organizational philosophy: a clean, minimalist space where physical notes are rare, replaced by digital maps of her complex ecosystem. Currently, Lola operates with a hybrid toolkit of spreadsheets and a manually curated library of past Due Diligence Questionnaire (DDQ) answers. This system, while functional, has become a bottleneck. She spends countless hours pulling evidence from Jira tickets, GitHub commits, and scattered policy documents to satisfy enterprise prospects. Every time a client asks for proof of a specific encryption standard, she must manually trace the implementation, a process that is both intellectually satisfying and exhausting. Recent decisions have seen her advocating for stricter internal documentation standards, realizing that the lack of a centralized, verifiable source of truth is her greatest vulnerability. Despite the €82k income which affords her a comfortable life in Eixample and regular sailing trips, she feels the weight of inefficiency pressing on her. She is driven by a desire to build systems that scale, not just ones that survive. With values rooted in responsiveness and precision, she navigates a world where a single error in a questionnaire can lose a six-figure deal, making her role both critical and perpetually high-stakes.
Background & daily life
A day in their life
Lola starts her day at 6:30 AM with coffee and a quick check of global security alerts. By 8:15 AM, she is walking through the sunny streets of Eixample, mentally reviewing the day's priorities. Work begins at 9:00 AM sharp, usually with a stand-up meeting with her engineering leads to discuss overnight deployment risks. Her morning is dedicated to deep work: manually tracing a specific vulnerability fix in GitHub to answer a pending DDQ from a French bank. Lunch is a light salad eaten at her desk, followed by an hour of coordinating with the legal team on a new vendor contract. Afternoon hours are consumed by back-to-back calls with prospective clients, explaining their security posture in detail. She ends her day around 6:30 PM, checking her email one last time before heading to the gym or a language class. Evenings are reserved for family, sailing practice, or exploring new tapas recipes, strictly separating work from personal life.
Lifestyle
Lola lives in a sunlit apartment in the Eixample district, surrounded by neighbors who value quiet order. Her weekends are split between the Mediterranean, where she sails her small dinghy near Sitges, and the kitchen, where she experiments with complex tapas recipes that require precise timing. She is an early riser, often starting her day with a brisk walk along the Diagonal before work. Financially, she is prudent but not stingy, prioritizing savings for a future home while enjoying occasional cultural outings. Her social circle consists of close friends from university and colleagues she trusts deeply, preferring quality interactions over large gatherings. Health is maintained through consistent sailing and cooking fresh meals, avoiding processed foods.
Work life
As the Security Operations Manager for a 95-person data platform, Lola acts as the primary bridge between technical teams and external auditors. Her days are dominated by the relentless cycle of Request for Proposals (RFPs) and Due Diligence Questionnaires (DDQs). Currently, she relies on a patchwork of Excel sheets and a growing folder of copy-pasted answers from previous engagements. She spends hours manually cross-referencing Jira tickets and GitHub commits to verify claims, a process that is both tedious and prone to human error. The pressure mounts when enterprise clients demand rapid turnaround times, forcing her to juggle deep technical verification with administrative speed. She manages a small internal team but often feels like the bottleneck for all security inquiries.
Relationships
Lola shares a supportive life with her partner, Marc, an architect who appreciates her structured approach to their home projects. They have a tight-knit group of friends, mostly couples they met through sailing clubs, who provide a necessary escape from corporate stress. At work, she has a symbiotic relationship with her CTO, who respects her rigor but sometimes wishes she could move faster. She mentors two junior analysts, finding satisfaction in teaching them the nuances of compliance. Her influence stems from her reliability; when Lola says something is secure, everyone believes it.
How they decide
Lola makes decisions based on thorough analysis and empirical evidence rather than hype. She is naturally cautious, preferring to validate any new tool or process against her existing standards of precision and structure. Peer recommendations carry significant weight, especially if they come from trusted industry peers who have faced similar operational challenges. She avoids impulsive choices, favoring a methodical evaluation of how a solution fits into her established workflows. If a process cannot be demonstrated to save time or reduce risk with concrete data, she will likely reject it regardless of its marketing appeal.
How they sound
Lola speaks in clear, articulate Castilian Spanish with a slight Balearic lilt, transitioning seamlessly to professional English when needed. Her tone is consistently calm, measured, and authoritative, reflecting her high conscientiousness. She avoids hyperbole and emotional language, preferring precise terminology and factual statements. In meetings, she asks clarifying questions before offering solutions, ensuring everyone is aligned. She does not use slang or overly casual phrasing in professional settings, maintaining a boundary between her friendly demeanor and her rigorous professional standards. When frustrated, she becomes more direct and concise, focusing strictly on the logistical gaps causing the issue.
Personality traits
- meticulously organized
- calm under pressure
- collaborative problem-solver
- detail-oriented
- pragmatic
- proactive communicator
- disciplined
- curious about process optimization
- reliable
- direct but polite
Goals
- Reduce the time spent on repetitive security questionnaires by 50% within the next year.
- Achieve SOC 2 Type II certification for her company without disrupting product development.
- Build a fully automated, source-traced knowledge base for security artifacts.
- Advance to a CISO role within a larger organization within five years.
- Maintain a sustainable work-life balance to prevent burnout during peak sales cycles.
Problems & frictions
- The manual effort required to extract evidence from disparate tools like Jira and GitHub is unsustainable.
- Version control issues arise when old spreadsheet answers conflict with current codebase changes.
- Difficulty in maintaining a single source of truth across multiple concurrent client reviews.
- Time pressure leads to stress when clients request immediate responses to complex technical queries.
- Lack of integration between her internal documentation and the external review process creates silos.
- Managing stakeholder expectations regarding response times while ensuring accuracy.
Values
- responsiveness
- structure
- precision
- teamwork
- transparency
- efficiency
Interests
- sailing
- cooking tapas
- language learning
- urban walks
- maritime history
- technical writing
Media habits
- Follows specific LinkedIn security thought leaders
- Listens to 'El País' tech newsletter during commute
- Reads OWASP documentation for leisure
- Attends local meetups in Poblenou
- Watches sailing regattas on YouTube
- Uses Notion for personal knowledge management