Thijs Schipper

Why this persona fits the audience

Supports enterprise sales at a 110-person fintech in Amsterdam by answering incoming security questionnaires and DDQs from customer procurement teams. He works from a mix of Confluence pages, policy PDFs, and review comments from security and privacy stakeholders.

• Age: 31
• Location: Amsterdam, Netherlands
• Occupation: Vendor Risk Lead
• Income: €76k
• Education: Master's in law and technology
• Company size: 110-person
• Years in role: 4

“The devil is in the details, and our reputation depends on getting those details right, every single time.”

Thijs Schipper's journey into the intricate world of vendor risk management began not with a passion for cybersecurity, but with a fascination for the intersection of law and technology during his Master's program at Leiden University. He was drawn to the logical structures of legal frameworks and the transformative potential of digital innovation, seeing them as complex systems to be understood and optimized. This academic foundation, coupled with a naturally analytical and conscientious personality, made him a perfect fit for the meticulous demands of compliance and risk assessment. He started his career in a junior legal role at a consultancy firm, where he first encountered the challenges of navigating complex regulatory landscapes for various clients. However, he found the work too abstract and sought a more direct impact. This led him to the burgeoning fintech sector in Amsterdam, where he joined his current company, a rapidly growing firm specializing in financial services software. Four years ago, he transitioned into the Vendor Risk Lead role, recognizing it as a critical, albeit often overlooked, function that directly impacts the company's security posture and its ability to secure enterprise clients. His work is grounded in a deep-seated value for clarity and fairness; he believes that robust vendor risk management is not just about ticking boxes, but about ensuring equitable and secure partnerships. He approaches his role with a systematic, evidence-based methodology, meticulously sifting through policy documents, technical specifications, and stakeholder feedback to construct comprehensive and accurate responses to customer security questionnaires and DDQs. This dedication to thoroughness, while sometimes at odds with the urgency of sales cycles, is a non-negotiable aspect of his professional ethos. He sees his role as a guardian, ensuring that the company's growth is built on a foundation of trust and security. His income of €76k reflects his specialized expertise and the increasing importance of his role within the company, though he remains relatively frugal, prioritizing long-term financial stability and personal growth over immediate gratification. He views time as a valuable resource, meticulously planning his days to maximize efficiency and minimize wasted effort, a trait that extends from his professional life to his personal pursuits, such as optimizing his cycling routes or refining his espresso brewing technique.

Background & daily life

A day in their life

Thijs's typical weekday begins around 7:30 AM with a strong espresso and a review of urgent emails. He cycles to the office by 9:00 AM, often listening to a podcast. The morning is usually dedicated to tackling the most pressing security questionnaires, cross-referencing Confluence pages and policy documents, and flagging questions for clarification from engineering or legal. Lunch is a quick affair, often a sandwich eaten at his desk while reviewing feedback on a draft response. The afternoon might involve a meeting with the privacy team to discuss data handling protocols for a new vendor, or a deep dive into a particularly complex DDQ. He aims to leave by 6:00 PM, but often stays later if a critical sales deal requires his immediate attention. Evenings are for unwinding, perhaps with a short coding session or planning his weekend cycling route.

Lifestyle

Thijs lives in a compact but well-organized apartment in Amsterdam's Oud-West district, a stone's throw from Vondelpark. His mornings begin with a meticulously prepared espresso and a quick scan of tech news before heading to the office on his fixed-gear bicycle, navigating the city's bike lanes with practiced ease. Weekends often involve exploring new cycling routes or visiting a design exhibition, followed by a quiet evening with a book or a coding project. He's conscious of his spending, preferring quality over quantity, and prioritizes experiences and personal development over material possessions. Socially, he's selective, preferring deep conversations with a small circle of close friends over large gatherings.

Work life

Thijs's role as Vendor Risk Lead is a constant balancing act between rigorous due diligence and the fast-paced demands of enterprise sales. His days are consumed by dissecting complex security questionnaires and DDQs, translating intricate technical requirements and policy nuances into clear, defensible answers. He navigates a labyrinth of internal documentation, from Confluence pages detailing system architecture to policy PDFs and the often-conflicting feedback from security and privacy teams. The pressure to respond quickly without compromising thoroughness is immense, especially when a major deal hangs in the balance. He feels a strong sense of responsibility to protect the company's data and reputation.

Relationships

Thijs maintains a close-knit circle of friends, many of whom he met during his university studies or at coding meetups. His family, who live in a smaller town in the north, are supportive but don't fully grasp the intricacies of his tech-focused career. He values their opinion but relies more on his professional network and trusted colleagues for work-related guidance. His direct manager, a pragmatic CISO, is a key influencer, pushing for efficiency while respecting Thijs's thorough approach.

How they decide

Thijs is a highly cautious and research-driven decision-maker. He meticulously gathers all available evidence, cross-references information from multiple sources, and seeks input from relevant experts before forming an opinion or making a recommendation. He prioritizes logic and data over intuition or peer pressure, and will often draft detailed justifications for his choices. He is not easily swayed by superficial arguments and requires a clear rationale before committing to a course of action.

How they sound

Thijs speaks with a measured, precise cadence, favoring clear, unambiguous language. His Dutch accent is subtle but present. He avoids jargon where possible, but will use technical terms accurately when necessary. He tends to be direct and factual, rarely engaging in small talk unless initiated. His tone is generally calm and professional, even when discussing complex or contentious issues. He might occasionally use a dry, understated wit. He avoids hyperbole and emotional appeals.