10 fictional AI personas. Exploratory perspectives, not a survey of real customers. Methodology & limitations

Kurt Steuber

Kurt Steuber

Security and compliance lead at a 19-person software consultancy

Full-depth AI personas

Why this persona fits the audience

Oversees security and compliance for a 19-person software consultancy in Dublin and checks domain registration details during vendor reviews, incident triage, and customer assurance questionnaires. He is comfortable with technical data, but the current process still includes ad hoc lookups across registrar sites and exported records stored in shared folders.

  • Age: 44
  • Location: Dublin, Ireland
  • Occupation: Security and Compliance Lead
  • Income: €90,000-€120,000
  • Education: Master's degree
  • Company size: 19
  • Years in role: 7
“Every detail matters when you're building trust; one overlooked registration can unravel months of diligent work.”

Kurt Steuber, 44, has dedicated the last seven years to fortifying the digital defenses of a Dublin-based software consultancy, a firm that has grown from a small startup to a respectable 19-person operation. His journey into security and compliance wasn't a direct path; he initially pursued a Master's in Computer Science with a focus on theoretical algorithms, but found himself increasingly drawn to the practical challenges of protecting systems and data. This analytical foundation serves him well in his current role, where he meticulously oversees security protocols and regulatory adherence. His income places him comfortably within the upper-middle class in Dublin, allowing for a stable family life and consistent savings, though he remains mindful of the company's budget constraints. Kurt’s personality is characterized by a high degree of conscientiousness; he is exceptionally organized, diligent, and detail-oriented, traits that are indispensable in his field. While not overtly extroverted, he is agreeable and collaborative, capable of navigating the interpersonal dynamics of a small team. His openness score suggests a preference for established methods over radical innovation, a pragmatic approach that suits his role. A significant portion of his professional life is consumed by ensuring 'due diligence' is more than just a buzzword. He is deeply invested in 'auditability' and 'risk control', viewing them as foundational pillars of the company's reputation. Recently, he’s been grappling with the inefficiencies of their vendor review process. The current method of manually checking domain registration details across disparate registrar websites, coupled with managing exported data in shared folders, is becoming untenable as the company expands its client base and vendor network. This has led him to explore more structured, potentially automated, solutions, though his cautious nature means any change will be thoroughly vetted. He recently pushed back on a proposal for a new client assurance questionnaire that lacked clear audit trails, emphasizing the need for verifiable data points. His current focus is on streamlining these critical, yet time-consuming, checks without compromising the integrity of the information gathered. He views his role not just as a technical function, but as a crucial enabler of the company's growth and client trust.

Background & daily life

A day in their life

Kurt's day begins around 7:00 AM with a quick scan of overnight security alerts and industry news while having breakfast. He commutes to the office by 8:30 AM, often listening to a cybersecurity podcast. His morning is usually dedicated to reviewing client assurance questionnaires or conducting internal security audits, meticulously documenting findings. Lunch is a quick affair, often at his desk while catching up on emails. The afternoon might involve a vendor security review, where he'll spend time checking domain registration details across various registrar sites, or a meeting with the development team to discuss compliance requirements for a new project. He aims to leave by 5:30 PM, but often stays later if an incident requires immediate attention or if he's deep into a complex documentation task. Evenings are for family, but he might spend an hour before bed reviewing technical papers.

Lifestyle

Kurt lives in a semi-detached house in a quiet suburb of Dublin with his wife and two teenage children. His routine is highly structured, revolving around work, family commitments, and personal development. He values financial stability, contributing a significant portion of his income to savings and investments. Weekends are typically spent on household chores, family outings, or catching up on industry reading. He’s not one for spontaneous social gatherings, preferring planned dinners with close friends or quiet evenings at home. His health is a moderate priority; he walks to the train station daily and tries to fit in a gym session twice a week.

Work life

As the sole security and compliance lead for a growing software consultancy, Kurt shoulders significant responsibility. His days are a blend of proactive risk assessment and reactive incident management. He spends considerable time documenting processes, reviewing vendor contracts, and preparing for audits. The current manual approach to domain registration checks, involving multiple browser tabs and spreadsheet cross-referencing, is a constant source of low-level frustration. He collaborates closely with the CTO and project managers, often acting as the gatekeeper for client assurance questionnaires. The pressure to maintain high security standards while the company scales is ever-present.

Relationships

Kurt's primary relationships are with his wife, who manages their household finances and schedules, and his two children, whose academic and extracurricular activities require his support. He maintains a small circle of close friends, mostly former university colleagues, with whom he shares professional insights and life updates. His direct manager, the CTO, is a key professional influence, valuing Kurt's thoroughness but also pushing for pragmatic solutions.

How they decide

Kurt is a highly analytical and research-driven decision-maker. He prioritizes thorough investigation, weighing potential risks and benefits meticulously. He seeks out data, consults documentation, and often creates internal comparison matrices before committing to a course of action. He is not easily swayed by trends or peer pressure, preferring to rely on evidence and established best practices. His decisions are typically well-documented and justifiable.

How they sound

Kurt speaks with a measured, precise cadence, avoiding jargon where possible unless discussing technical specifics. His tone is generally calm and professional, even when discussing stressful situations. He tends to use complete sentences and avoids slang or overly casual language. He's not one for hyperbole and prefers to state facts directly. He might pause to consider his words carefully before responding to complex questions.

Personality traits

  • Meticulous
  • Systematic
  • Reserved
  • Analytical
  • Diligent
  • Detail-oriented
  • Pragmatic
  • Methodical
  • Cautious

Goals

  • Achieve ISO 27001 certification for the company within two years.
  • Develop a more automated and auditable system for vendor due diligence.
  • Mentor junior team members in security best practices.
  • Maintain a healthy work-life balance despite increasing responsibilities.
  • Contribute to the company's reputation as a secure and trustworthy partner.

Problems & frictions

  • The time-consuming nature of manual domain registration checks during vendor onboarding.
  • Lack of integrated tools for comprehensive security posture management.
  • Balancing the need for robust security with the agility required by a small consultancy.
  • Keeping up with the ever-evolving landscape of cyber threats and regulations.
  • Ensuring consistent application of security policies across all projects and teams.

Values

  • due diligence
  • auditability
  • risk control
  • data integrity
  • process efficiency

Interests

  • security reviews
  • vendor management
  • technical compliance
  • threat intelligence
  • data privacy regulations

Media habits

  • Reads industry news sites (e.g., The Register, BleepingComputer)
  • Listens to tech podcasts during commute
  • Follows security experts on LinkedIn
  • Subscribes to newsletters from NIST and ENISA
  • Occasional participation in webinars

Questions & answers

Kurt Steuber’s public research answers, newest questions first. Up to 10 per page.

  1. What do you use today instead of Whois JSON API (https://whoisjsonapi.com/) (a competitor, a spreadsheet, doing it by hand)? Compared with that, what would make Whois JSON API better or worse for you, and what would keep you on your current option? Also say the maximum you would pay per month in USD (0 if nothing).

    Currently, we rely on manual lookups across various registrar websites and manage exported data in shared folders. This process is time-consuming and prone to errors, especially as our vendor network grows. WhoisJSONAPI's ability to provide structured JSON responses and automate these checks is appealing. The core benefit would be streamlining our vendor review process and customer assurance questionnaires, ensuring we have accurate, readily accessible domain registration details. The 'Domain Monitoring' feature also seems promising for proactive risk management. However, I'd need to understand the API credit system more clearly to assess its value for our specific needs. Regarding pricing, I would be willing to pay up to $75 per month for a solution that significantly reduces manual effort and improves accuracy.
    View answer & full research →
Keep exploring

What would you ask next?

Test another angle with this panel, or create an audience for your own market.