Associate Director, Digital Forensics and Incident Response

Control Risks; London; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

Join a leading global consultancy as an Associate Director in the Digital Forensics and Incident Response team in London. You will leverage your expertise to guide investigations and foster business development, contributing significantly to the growth and success of the EMEA practice. If you are adept in both technical forensic consultancy and strategic business development, this role offers a dynamic environment to advance your career and influence the future direction of forensic technology.

Benefits

Transparent compensation and benefits package

Discretionary global bonus scheme

Hybrid working arrangements

Equal opportunities employer

Qualifications

• Proven knowledge in digital forensics and computer forensics.
• Extensive experience in managing client expectations.
• Expertise in using forensic software tools.

Responsibilities

• Manage and provide forensic incident response consultancy.
• Engage across the business for technology consulting.
• Lead business development and marketing initiatives.

Skills

Digital Forensics

Cyber Incident Response

Forensic Investigations

Data Analytics

Business Development

Tools

X-Ways

EnCase

Nuix

Axiom

Cellebrite

Job description

We now have an exciting opportunity for an Associate Director to join our Digital Forensics and Incident Response (DFIR) team in London. As the senior member of the EMEA DFIR team with deep digital forensic experience, you will be integral to the wider EMEA practice, and part of a global practice offering, influencing the direction of our forensic technology and digital forensics incident response capability.

The Discovery and Data Insights department is the hub of all technical consulting, providing digital forensics and incident response solutions for cyber response investigations, digital forensic investigations, eDiscovery, and data analytics. Our clients include law firms and Fortune 500 multinationals worldwide.

Day-to-day, you will manage and execute matters on short notice, supporting crises and deploying the team as needed. As the technical lead, you will guide engagements, provide direction, and ensure high-quality, responsive forensic incident management. You will also engage across the business to leverage technology consulting for business development and go-to-market strategies, increasing the team’s visibility and capability through thought leadership, white papers, technical demonstrations, and collaborative client meetings. Your role will be key to our growth and success in the region.

Responsibilities

• Manage and provide forensic incident response consultancy, including scoping data estates, data collection, and investigative analysis for clients.
• Support adjacent divisions such as Digital Risks, Investigations, and Technology Consulting across regions.
• Deliver high-quality, timely, and efficient results to clients.
• Ensure work is defensible and meets evidential standards as appropriate.
• Show innovation and initiative by fostering teamwork and creative problem-solving.
• Anticipate client needs and improve work efficiency continually.
• Respond to inquiries, converting them into opportunities, sales leads, and proposals.
• Lead business development and marketing efforts across Discovery and Data Insights, especially in Cyber, Investigations, and Forensic Accounting.

• Willingness and flexibility to travel internationally.

Minimum Requirements

• Extensive professional and technology experience in digital forensics, cyber investigations, financial crime, or compliance.
• Proven knowledge of cyber incident response, forensic investigations, and best practices (MITRE ATT&CK, NPCC, NIST, SANS).
• Expertise in multiple OS and infrastructure, including Microsoft, Linux, cloud services (Azure, Google Workspace, AWS).
• Proficiency in PowerShell, Bash, Python, SQL, and log analysis.
• Experience with forensic software tools (X-Ways, EnCase, Nuix, Axiom, Cellebrite) and open-source tools (Velociraptor).
• Track record in forensic collections, incident response, and digital investigations with detailed documentation.
• Ability to produce written analyses, reports, and presentations.
• Excellent communication skills for diverse audiences.
• Experience managing client expectations and project lifecycles.
• Ability to identify opportunities for additional services post-breach/remediation.
• Strong interpersonal skills and team collaboration.
• Experience in creating project estimates, plans, proposals, and agreements.
• Leadership skills to manage and develop teams.
• Ability to work under pressure, meet deadlines, and handle multiple tasks.

Preferred

• Knowledge of programming/scripting.

We offer a competitive compensation and benefits package, including a discretionary global bonus scheme, supporting hybrid and flexible working arrangements. We are committed to equal opportunity employment, encouraging applicants from diverse backgrounds to apply.