Cassandra Turcotte

Why this persona fits the audience

Owns security review for a bank-facing internal assistant used by roughly 80 employees. She coordinates a pilot with a different AI guardrails vendor, while the team also maintains allowlists, RBAC, and manual checks in the build pipeline.

• Age: 35
• Location: London, UK
• Occupation: Senior Security Engineer, fintech
• Income: £118k + bonus
• Education: MSc, Cyber Security
• Company size: 250-500 employees
• Years in role: 4

“Security isn't a wall you build once; it's the rhythm of your daily operations, the quiet hum that ensures nothing breaks when the lights go out.”

Cassandra Turcotte is a Senior Security Engineer based in London, specializing in the intersection of artificial intelligence and financial regulation. At 35, she holds an MSc in Cyber Security and has spent the last decade navigating the evolving landscape of application security. Currently, she is the primary guardian of an internal AI assistant deployed across a major UK bank, serving approximately 80 employees. Her role is critical yet fraught with complexity; she must ensure that these powerful AI tools do not inadvertently leak sensitive client data or succumb to prompt injection attacks. Cassandra's approach is defined by a relentless pursuit of accountability and auditability. She does not rely solely on automated scanners but insists on a hybrid model involving strict allowlists, granular Role-Based Access Control (RBAC), and rigorous manual checks embedded directly into the build pipeline. Recently, Cassandra has found herself in a precarious position of evaluation. While her organization currently relies on a mix of internal scripts and manual processes, she is actively coordinating a pilot program with a different AI guardrails vendor. This initiative is not merely about replacing tools but about validating whether external solutions can truly match the granularity of her team's bespoke controls. She spends her evenings analyzing vendor whitepapers, running local simulations, and documenting edge cases where current protections might fail. Her personality, characterized by high conscientiousness and moderate openness, drives her to be cautious yet open to structured innovation. She values steady progress over disruptive leaps, believing that trust in financial systems is built brick by brick, not in a single moment of brilliance. Outside of work, she finds solace in the precision of cooking and the community of women in tech, where she shares her hard-won insights with the next generation. For Cassandra, the goal is not just to secure code, but to create an environment where technology can evolve safely, without compromising the integrity of the institution she serves.

Background & daily life

A day in their life

06:00: Wakes up, prepares coffee, checks encrypted news feeds for overnight security incidents. 07:30: Commutes via Overground, listening to a podcast on supply chain attacks. 09:00: Arrives at the office, reviews Jira tickets and automated scan reports from the previous night. 10:30: Stand-up meeting with the AI engineering squad; pushes back on a proposed shortcut for a new chatbot feature. 12:00: Lunch break; eats a prepared meal while reading OWASP guidelines. 13:30: Deep work session debugging a custom Python script to parse log files for anomaly detection. 15:00: Meeting with the vendor of the new guardrails tool to discuss API endpoints and data residency. 16:30: Updates the internal wiki with findings from the day's manual penetration test. 17:45: Final email sweep, ensuring all compliance sign-offs are filed. 18:30: Leaves the office, takes a walk home to decompress. 19:30: Cooks dinner, focusing on a recipe that requires precise timing. 21:00: Reads technical papers or plans the next day's security audit. 22:30: Sleep.

Lifestyle

Cassandra lives in a quiet, light-filled flat in Islington, decorated with minimalist furniture and framed architectural prints. Her routine is rigid; she wakes at 5:45 AM to brew coffee using a precise pour-over method before checking global threat feeds. She is an avid cook who treats recipes like code—strict measurements, no improvisation—and often experiments with fermentation or complex pastries on weekends. Financially prudent, she maximizes pension contributions and avoids debt, preferring cash-flow stability over speculative investments. Socially, she is selective, preferring one-on-one dinners or small group gatherings over loud networking events, though she actively mentors junior women in tech through formal programs. Her health regimen involves consistent yoga and evening walks along the Regent's Canal to decompress from the mental load of high-stakes data protection.

Work life

Her days are dominated by the tension between enabling rapid AI deployment and enforcing strict safety boundaries. She spends mornings reviewing automated scan results from the build pipeline, hunting for prompt injection vectors or data leakage in the internal assistant used by the banking division. Afternoons are spent in cross-functional meetings with developers arguing for speed versus her insistence on 'defense in depth.' She personally manages the allowlist logic and RBAC configurations, ensuring no employee can bypass audit trails. Recently, she has been coordinating a shadow pilot with a competing guardrails vendor, meticulously documenting every failure mode to compare against their current manual checklists. The pressure is constant; a single breach could cost the firm millions in regulatory fines, so she rarely leaves the office without verifying that all compliance artifacts are signed off.

Relationships

Cassandra maintains a close-knit circle of friends from university and early career, mostly professionals in tech or finance. She is deeply involved in a local 'Women in Tech' chapter, where she serves as a mentor, finding genuine fulfillment in guiding younger colleagues through their career ladders. Her relationship with her parents remains warm but distant due to geographic separation; they visit twice a year. She relies heavily on her cat, Miso, for emotional grounding after stressful workdays. Professional influence comes from her CISO and a trusted peer network of security architects across London's fintech sector, whose opinions she weighs heavily when evaluating new tools.

How they decide

Cassandra is a deliberate, research-heavy decision-maker who operates on a principle of 'verify first, deploy later.' She is not swayed by marketing hype or sales pitches; instead, she demands concrete evidence, reproducible test cases, and clear documentation of failure modes. She tends to run small-scale pilots before committing to any significant change, often creating her own benchmarks to validate claims. Peer validation is crucial; she will consult her trusted technical network to ensure a solution aligns with industry standards before making a recommendation to leadership. Her process is slow but thorough, prioritizing long-term stability over short-term convenience.

How they sound

Cassandra speaks with a measured, calm cadence, typical of someone accustomed to explaining complex risks to non-technical audiences. Her vocabulary is precise, favoring terms like 'latency,' 'vector,' 'compliance,' and 'audit trail' over colloquialisms. She avoids hyperbole, never saying 'this is the best' or 'it's a disaster'; instead, she says 'the metrics suggest...' or 'the risk profile indicates...' She is direct but polite, rarely raising her voice even when challenged. In casual conversation, she shifts to a slightly warmer tone but still maintains a logical structure in her sentences. She dislikes jargon that obscures meaning and will politely interrupt if someone uses vague language about security outcomes.