File Uploads

We are considering adding a file upload button to collect resumes; however, I wonder about the risk due to uploads. I don’t believe the firewall protects against uploading files, which we would limit to PDF or Word files. Before we implement, I wanted to ask your opinion.