Info Security Analyst - Authentication #107832

C.G. Consulting Group; Toronto; Hybrid; CAD 170,000 - 210,000; Full time

Job summary

CIBC in Toronto is seeking an experienced Senior Info Security Analyst for Authentication Services. You will assess high‑profile security projects, identify exposures and present practical risk‑based recommendations to senior management.

This role leads MFA initiatives, security product evaluations and the implementation of controls to support enterprise risk management. You will work in a hybrid environment with 1–2 onsite days per week and collaborate with the Identity and Access Management

Qualifications

• IAM experience required with 7–10 years in information security consulting.
• CISSP or CCSP certification is required.
• Experience with Adaptive MFA and Passwordless solutions; Azure cloud knowledge.
• Knowledge of OAuth, SAML, OpenID, FIDO, SSO and related web protocols.
• Hands-on experience with ITIL Service Lifecycle and security operations.

Responsibilities

• Act as interface with business units to assess security risks on high-profile projects.
• Identify exposures and present practical, risk-based recommendations to senior management.
• Lead evaluation, testing and deployment of security products and controls.
• Provide technical leadership to security operations and network teams.
• Drive MFA initiatives and risk-based authentication improvements.

Skills

MFA solutions

Adaptive MFA

Azure

OAuth/SAML/OpenID

ITIL

Passwordless

Education

Bachelor's in CS/Engineering

CISSP/CCSP

Tools

CyberArk

ForgeRock

Microsoft

Job description

Info Security Analyst - Authentication #107832

Start/End Dates: 10/27/2026 - 10/26/2027

Work Location: Downtown Toronto, near TTC and GO

Job Title: IT - Info Security Analyst - Senior

Position Title: Info security analyst - Senior (Senior Consultant, Authentication Services)

Line of Business: Chief Security Office - Identity and Access Management

Target rate range: $90-100hr B2B

Target Start Date: October 27, 2026.

Duration: 12 months

Potential for this contract to be extended or converted to FTE? Extension: Potentially, FTE: No

Hybrid work: in-office Tuesdays and one Friday every month

Office Location: 141 Bay 17th Floor

Work Schedule (hours per week, start time): 37.5 Hours/week, 9-5 Monday to Friday

Potential for OT? No

What does the LOB do?: Cyber Security Division.

Reason the role is open? Net New roles

What project will this contractor be working on? Working on large project pushing forward MFA.

Team Size? The team consists of approximately 10 people and works closely with partners across the bank. They are part of the broader Security organization of roughly 700 employees, with the IM team comprising about 150 members.

Selling points of the positions: This is a great opportunity for candidates who prefer a hybrid work environment, offering added convenience and flexibility at a time when many banks are increasing their in-office requirements.

Who Will the Candidate Be Working with on a Daily Basis? The hiring managers team of 10 people

How many years of experience? 7-10 years

Job Description: AARM Project CW Role

The Senior Consultant, Authentication Services is responsible for acting as an interface with the business to assess high profile projects for security risks, identifying potential exposures and presenting recommendations that are practical and achievable. The role collaborates with and advises senior management, utilizing a solid understanding of business dynamics to prepare management reporting of all security engagements. The Senior Consultant, Authentication Services focuses on the optimization of resources, directing the review, testing and implementation of security products and control techniques to support the development of departmental plans. In addition, the role provides technical leadership, interpreting complex information and leading the evaluation of proposed security systems. The role devises new methods using strong analytic and inductive thinking, offering guidance on the provision of technical support to clients, management, security operations and network operations.

What you’ll be doing As a member of the Identity and Access Services Management group within Information Security, you will interface with various partners and Lines of Business, equally focused on delivery excellence and continuous improvement in all disciplines and processes as they relate to Identity and Access Management, specifically Risk Based Authentication. You will play a key role in ensuring project meet objectives on time and on budget by increasing employee and stakeholder adoption and usage. At CIBC we enable the work environment most optimal for you to thrive in your role you’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-2 days per week on-site, while other days will be remote.

How you'll succeed

• Proficient in Security Solutions - Knowledge of leading market tools (Microsoft, CyberArk, ForgeRock) and their MFA solutions. Experience in Adaptive MFA and Passwordless solutions an asset. Knowledge of OAuth, SAML, OpenID, FIDO, SSO and web protocols XML, SOAP, JSON, REST. Working experience on cloud environment like Azure. Should have hands‑on working knowledge of ITIL Service Lifecycle.
• Project Management and Delivery - Lead and deliver on Modern Authentication Initiatives. Liaise with the business teams on implementation and adoption of CIBC controls, Adaptive MFA capabilities and definition of access policies in line with overall Program.
• Zero Trust Champion - You will lead the improvement of multi‑factor authentication processes, controls and communications across stakeholder groups. Where required, consult with Technology and LOBs.
• Strategic plans and standards: Contribute to the definition of our zero trust roadmap and policy development including promoting adoption of the Risk Based Authentication platform across the enterprise and enhancement of technical service capabilities. Stay abreast of industry technical and business trends through participation in professional associations, practice communities & individual learning.
• Leadership & Communication – Collaborate with senior leaders across the company and make informed recommendations to enhance information system security. Weigh business needs against security concerns and provide risk‑based recommendations to improve information systems security, which are practical and achievable, thereby allowing the Lines of Business to make informed risk decisions

Who you are

• You know that details matter. You notice things that others don't. Your critical thinking skills help to inform your decision making.
• You give meaning to data. You enjoy investigating complex problems and making sense of information. You communicate detailed information in a meaningful way.
• You’re digitally savvy. You seek out innovative solutions and embrace evolving technologies. You can easily adapt to new tools and trends.
• You have a degree/diploma in Computer Science, Engineering, or a related field. You have at least ten years of experience as an Information Security Consultant or a similar role. You’re a certified professional. Must have CISSP, CCSP, CIAM or CCSP designation.

Must Have Requirement

• Candidate must have IAM experience. – at least 7-10 years of experience as an Information Security Consultant or a similar role.
• Certification in CISSP or CCSP
• Experience in Adaptive MFA and Passwordless solutions an asset. Knowledge of OAuth, SAML, OpenID, FIDO, SSO and web protocols XML, SOAP, JSON, REST. Working experience on cloud environment like Azure.
• Should have hands‑on working knowledge of ITIL Service Lifecycle.
• Knowledge of leading market tools (Microsoft, CyberArk, ForgeRock) and their MFA solutions.
• Liaise with the business teams on implementation and adoption of CIBC controls, Adaptive MFA capabilities

Nice to Have

• You have a degree/diploma in Computer Science, Engineering, or a related field
• Banking experience/Specific CIBC experience

Soft Skills

• Leadership & Communication – Collaborate with senior leaders across the company and make informed recommendations to enhance information system security
• Strong presentation skills as these candidates will be presenting to key stakeholders.

NOTE: Role will close on Sept 28 at 12 noon