Web Security and Privacy Specialist

Zohorecruit; Vancouver; On-site; CAD 110,000 - 170,000; Full time

Job summary

Archive Digital is a remote-position project to assemble a bilingual digital platform for a nonprofit organization. The contractor will review security controls, coordinate testing and verify remediation with the delivery team and client stakeholders.

Candidates should have 5–10 years of experience in security, privacy compliance, and threat modelling, with fluency in English and French being a strong advantage. Remote work is offered with availability during EST business hours.

Qualifications

• Web/API security assessment and threat modelling.
• Identity, least-privilege access and encryption.
• Canadian privacy requirements and youth-data considerations.
• 5 to 10 year experience and ability to work remotely.
• English fluent; French a huge asset.

Responsibilities

• Review the project’s application, identity, AWS and integration controls.
• Identify security and privacy risks, coordinate testing and verify remediation with stakeholders.

Skills

Web API security

Threat modelling

Vulnerability remediation

Identity and access management

Encryption

AWS controls

Tools

AWS

Job description

Contract | Estoras Group of Companies | Remote Job

Posted On 22/09/2026

Job Information

Company Name Archive Digital

Work Experience 5+ years

Advertising

Job Description

This is a remote position.

Archive is assembling a team to build a bilingual digital platform for a non profit organization. Each role has one planned assignment, with specialist involvement as needed. Qualified people may cover more than one role.

Client's internal team leads product, business project management, UX/design and English/French content. Archive leads technical delivery and handover. All candidates should demonstrate relevant delivery experience, collaborative working and clear documentation. Nonprofit or education experience is an asset.

This contract role will review the project’s application, identity, AWS and integration controls. Identify security and privacy risks, coordinate agreed testing, and verify remediation with the delivery team and Client’s responsible stakeholders.

Requirements

Web/API security assessment, threat modelling and vulnerability remediation.

Identity, least-privilege access, encryption, secrets management and audit logging.

Canadian privacy requirements, consent, retention, residency and youth-data considerations.

Security test scoping, risk reporting and coordination of independent testing where required.

5 to 10 year experience, Canada location, Work remotely, Position to remain open till filled

Must be fluent in spoken and written English, huge asset if you are also fluent in spoken and written French.

Prefer contractor located in Canada or the USA. Client is on the East Coast of Canada so must be available during standard EST business hours.