Info Security Analyst - Authentication #107832

Start/End Dates: 10/27/2026 - 10/26/2027

Work Location: Downtown Toronto, near TTC and GO

Job Title: IT - Info Security Analyst - Senior

Position Title: Info security analyst - Senior (Senior Consultant, Authentication Services)

Line of Business: Chief Security Office - Identity and Access Management

Target rate range: $90-100hr B2B

Target Start Date: October 27, 2026.

Duration: 12 months

Potential for this contract to be extended or converted to FTE? Extension: Potentially, FTE: No

Hybrid work: in-office Tuesdays and one Friday every month

Office Location: 141 Bay 17th Floor

Work Schedule (hours per week, start time): 37.5 Hours/week, 9-5 Monday to Friday

Potential for OT? No

What does the LOB do?: Cyber Security Division.

Reason the role is open? Net New roles

What project will this contractor be working on? Working on large project pushing forward MFA.

Team Size? The team consists of approximately 10 people and works closely with partners across the bank. They are part of the broader Security organization of roughly 700 employees, with the IM team comprising about 150 members.

Selling points of the positions: This is a great opportunity for candidates who prefer a hybrid work environment, offering added convenience and flexibility at a time when many banks are increasing their in-office requirements.

Who Will the Candidate Be Working with on a Daily Basis? The hiring managers team of 10 people

How many years of experience? 7-10 years

Job Description: AARM Project CW Role

The Senior Consultant, Authentication Services is responsible for acting as an interface with the business to assess high profile projects for security risks, identifying potential exposures and presenting recommendations that are practical and achievable. The role collaborates with and advises senior management, utilizing a solid understanding of business dynamics to prepare management reporting of all security engagements. The Senior Consultant, Authentication Services focuses on the optimization of resources, directing the review, testing and implementation of security products and control techniques to support the development of departmental plans. In addition, the role provides technical leadership, interpreting complex information and leading the evaluation of proposed security systems. The role devises new methods using strong analytic and inductive thinking,



offering guidance on the provision of technical support to clients, management, security operations and network operations.

What you’ll be doing As a member of the Identity and Access Services Management group within Information Security, you will interface with various partners and Lines of Business, equally focused on delivery excellence and continuous improvement in all disciplines and processes as they relate to Identity and Access Management, specifically Risk Based Authentication. You will play a key role in ensuring project meet objectives on time and on budget by increasing employee and stakeholder adoption and usage. At CIBC we enable the work environment most optimal for you to thrive in your role you’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-2 days per week in office, while other days will be remote.

How you'll succeed

Proficient in Security Solutions - Knowledge of leading market tools (Microsoft, CyberArk, ForgeRock) and their MFA solutions. Experience in Adaptive MFA and Passwordless solutions an asset. Knowledge of OAuth, SAML, OpenID, FIDO, SSO and web protocols XML, SOAP, JSON, REST. Working experience on cloud environment like Azure. Should have hands‑on working knowledge of ITIL Service Lifecycle.

Project Management and Delivery - Lead and deliver on Modern Authentication Initiatives. Liaise with the business teams on implementation and adoption of CIBC controls, Adaptive MFA capabilities and definition of access policies in line with overall Program.

Zero Trust Champion - You will lead the improvement of multi‑factor authentication processes, controls and communications across stakeholder groups. Where required, consult with Technology and LOBs.

Strategic plans and standards: Contribute to the definition of our zero trust roadmap and policy development including promoting adoption of the Risk Based Authentication platform across the enterprise and enhancement of technical service capabilities.



Stay abreast of industry technical and business trends through participation in professional associations, practice communities & individual learning.

Leadership & Communication – Collaborate with senior leaders across the company and make informed recommendations to enhance information system security. Weigh business needs against security concerns and provide risk‑based recommendations to improve information systems security, which are practical and achievable, thereby allowing the Lines of Business to make informed risk decisions

Who you are

You know that details matter. You notice things that others don't. Your critical thinking skills help to inform your decision making.

You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way.

You’re digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends.

You have a degree/diploma in Computer Science, Engineering, or a related field. You have at least ten years of experience as an Information Security Consultant or a similar role. You’re a certified professional. Must have CISSP, CCSP, CIAM or CCSP designation.

Must Have Requirement

Candidate must have IAM experience. – at least 7-10 years of experience as an Information Security Consultant or a similar role.

Certification in CISSP or CCSP

Experience in Adaptive MFA and Passwordless solutions an asset. Knowledge of OAuth, SAML, OpenID, FIDO, SSO and web protocols XML, SOAP, JSON, REST. Working experience on cloud environment like Azure.

Should have hands‑on working knowledge of ITIL Service Lifecycle.

Knowledge of leading market tools (Microsoft, CyberArk, ForgeRock) and their MFA solutions.

Liaise with the business teams on implementation and adoption of CIBC controls, Adaptive MFA capabilities

Nice to Have

You have a degree/diploma in Computer Science, Engineering, or a related field

Banking experience/Specific CIBC experience

Soft Skills

Leadership & Communication – Collaborate with senior leaders across the company and make informed recommendations to enhance information system security

Robust presentation skills as these candidates will be presenting to key stakeholders.

NOTE: Role will close on Sept 28 at 12 noon

#J-18808-Ljbffr

📌 Info Security Analyst - Authentication #107832 (Ontario)
🏢 C.G. Consulting Group
📍 Ontario