Web Security and Privacy Specialist

Zohorecruit; Canada; Hybrid; CAD 96,000 - 152,000; Full time

Job summary

Zohorecruit is seeking a security-focused contract professional to join Archive in delivering a bilingual digital platform for a nonprofit. The role focuses on reviewing application security, identity controls, AWS integrations, and privacy compliance within a Canadian context.

You will identify security and privacy risks, coordinate testing, and verify remediation with delivery teams and stakeholders. This position supports EST business hours and remote work from Canada or the USA.

Qualifications

• Web/API security assessment, threat modelling and remediation of vulnerabilities.
• Identity and access management, encryption, secrets management and audit logging.
• Canadian privacy requirements, consent, retention, residency and youth-data considerations.
• Security test scoping, risk reporting and coordination of independent testing where required.
• Experience 5–10 years; Canada location; remote work; EST business hours.
• Fluent in English; French is a plus.

Responsibilities

• Review the project’s application, identity, AWS and integration controls.
• Identify security and privacy risks and coordinate remediation with delivery teams.
• Coordinate testing and verify remediation with Client’s stakeholders.
• Document findings and ensure governance and traceability.

Skills

Web security assessment

Threat modelling

Vulnerability remediation

Identity & access management

Encryption

Secrets management

Audit logging

Privacy compliance (Canada)

Data retention

Youth data considerations

Security testing coordination

Job description

Archive is assembling a team to build a bilingual digital platform for a non profit organization. Each role has one planned assignment, with specialist involvement as needed. Qualified people may cover more than one role.

Client's internal team leads product, business project management, UX/design and English/French content. Archive leads technical delivery and handover. All candidates should demonstrate relevant delivery experience, collaborative working and clear documentation. Nonprofit or education experience is an asset.

This contract role will review the project’s application, identity, AWS and integration controls. Identify security and privacy risks, coordinate agreed testing, and verify remediation with the delivery team and Client’s responsible stakeholders.

Requirements

Web/API security assessment, threat modelling and vulnerability remediation.

Identity, least-privilege access, encryption, secrets management and audit logging.

Canadian privacy requirements, consent, retention, residency and youth-data considerations.

Security test scoping, risk reporting and coordination of independent testing where required.

5 to 10 year experience, Canada location, Work remotely, Position to remain open till filled

Must be fluent in spoken and written English, huge asset if you are also fluent in spoken and written French.

Prefer contractor located in Canada or the USA. Client is on the East Coast of Canada so must be available during standard EST business hours.