Web security and privacy specialist

This is a remote position.

Archive is assembling a team to build a bilingual digital platform for a non profit organization. Each role has one planned assignment, with specialist involvement as needed. Qualified people may cover more than one role.

Client's internal team leads product, business project management, UX/design and English/French content. Archive leads technical delivery and handover. All candidates should demonstrate relevant delivery experience, collaborative working and clear documentation. Nonprofit or education experience is an asset.

This contract role will review the project’s application, identity, AWS and integration controls. Identify security and privacy risks, coordinate agreed testing, and verify remediation with the delivery team and Client’s responsible stakeholders.

Requirements

• Web/API security assessment, threat modelling and vulnerability remediation.
• Identity, least-privilege access, encryption, secrets management and audit logging.
• Canadian privacy requirements, consent, retention, residency and youth-data considerations.
• Security test scoping, risk reporting and coordination of independent testing where required.
• 5 to 10 year experience, Canada location, Work remotely, Position to remain open till filled.

Must be fluent in spoken and written English, huge asset if you are also fluent in spoken and written French.

Prefer contractor located in Canada or the USA. Client is on the East Coast of Canada so must be available during standard EST business hours.