In JobRoller, job seekers do not upload their resume, they complete a resume form which is stored in the
resumes custom post type in JobRoller. You can restrict access to resumes within the JobRoller admin settings (including charging for subscription to the resume database), as well as restrict general WordPress back office access to only admin. Thanks.