Cybersecurity and Data Systems Lead
Rethink Priorities
📍 Remote (Global) 🕔 Contract ⏳ 06/02/2026
Rethink Priorities is seeking a highly skilled technical contractor to lead a comprehensive update of our digital security infrastructure and data resiliency protocols. This project aims to fortify our organizational defenses, ensure data continuity across our primary platforms, and establish robust monitoring solutions. Rethink Priorities is a remote-first, nonprofit think-and-do tank conducting research and implementation work across multiple cause areas.
Contract Duration: Short-term/Project-based (with potential for limited ongoing support).
Target Start Date: February or March 2026 at the latest.
Application Process: To express interest in this project, please be sure to include all the below:
Current Resume or CV highlighting relevant technical certifications and past projects.
A Brief Cover Paragraph outlining your specific qualifications for this scope of work, including examples of similar security or backup implementations you have led.
Your Availability & Fees, i.e., estimated start date and weekly capacity and proposed hourly rate or total project fee. We have a strong preference for hourly rates with an estimated number of hours per project. Fixed-fee proposals may be considered if clearly scoped.
Key Responsibilities
The selected contractor will be responsible for the following key deliverables:
Data Backup & Recovery Architecture: Design and implement an automated, organization-wide data backup process. This must cover all of RP’s major tech platforms, specifically including Google Workspace, Slack, and Asana, ensuring data integrity and recovery readiness.
Define backup retention policies and recovery priorities
Validate backup integrity through at least one test restoration and document recovery procedures.
Security Protocol Development: Conduct a thorough review of RP’s current cybersecurity practices. In consultation with RP Leadership, you will develop a new, formal cybersecurity protocol and lead the initial setup phase.
The policy must include: identity and access management standards, device security requirements for organization-owned and personal devices, data handling policies, and remote work security expectations.
EDR/MDR Deployment: Research, recommend, and configure appropriate Endpoint Detection and Response (EDR) or Managed Detection and Response (MDR) solutions tailored to our organizational size and needs.
Deploy solutions across all staff devices, including personal staff devices, and document minimum security requirements.
Vulnerability Assessments:
Perform a technical review of our current website infrastructure to identify and mitigate potential vulnerabilities. Provide prioritized remediation recommendations based on risk and feasibility, with action plans where possible.
Review user access across core systems, and recommend improvements to onboarding and offboarding processes.
Develop lightweight incident response plans covering common scenarios (phishing, credential compromise, lost device, etc.). Produce clear documentation and basic IT runbooks.
The selected contractor will not be responsible for the following:
Ongoing helpdesk or end-user support (password resets, device troubleshooting)
24/7 monitoring, on-call availability, or emergency response unless agreed upon
Procurement, maintenance, or physical management of staff hardware
Qualifications and Experience
We are looking for a partner with:
Proven experience in cloud security architecture (SaaS-heavy, remote environments).
Deep familiarity with API-based backup solutions for productivity tools (Afi, Backupify, or similar).
A track record of implementing EDR/MDR solutions (e.g., ThreatDown, Bitdefender, CrowdStrike, SentinelOne, or similar).
Prior experience leading the implementation of new IT or security policies at organizations of comparable size (approximately 80 employees).
Strong communication skills to translate technical requirements into leadership-level protocols.
This is a contracting position, thus, there are no benefits offered for this contracting engagement.
