Manager - Digital Forensics

KordaMentha; Auckland; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Professional development

Flexibility

Career growth

Leave options

Health & wellbeing

Culture & connection

Family support

Job summary

KordaMentha is seeking an experienced Digital Forensics & Incident Response (DFIR) Manager to join the Auckland Forensic team. You will lead complex digital forensic investigations and cyber incident response engagements, working with senior leaders in Auckland and the broader Australia team.

Expect to handle digital evidence collection, forensic examination, data analysis, and the preparation of clear, defensible investigation reports.

Qualifications

• 5–6 years of demonstrated experience delivering digital forensic investigations and/or cyber incident response engagements.
• Strong knowledge of digital forensic processes, electronic evidence and evidence integrity.
• Practical experience collecting and examining electronic devices and data (computers, mobile devices, cloud repos).
• Strong understanding of IT, information security, IT infrastructure, operating systems, networks.
• Ability to independently undertake digital forensic examinations and produce high‑quality reports.
• Strong analytical capability and attention to detail when handling complex technical information.
• Excellent written and verbal communication skills with the ability to present findings to non‑technical stakeholders.

Responsibilities

• Lead and deliver digital forensic investigations and cyber incident response engagements.
• Undertake collection, preservation and analysis of electronic evidence across devices and digital sources.
• Conduct forensic examinations and analyse data to identify evidence, patterns and findings.
• Prepare clear, accurate investigation, forensic and metadata analysis reports.
• Manage technical workstreams with a high degree of autonomy while collaborating with multidisciplinary teams.
• Engage with clients and senior stakeholders, translating technical findings into practical insights.
• Support engagements across corporate, government and other organisations.

Skills

Digital forensics

Incident response

Client management

Report writing

Autonomy

Education

Tertiary qualification in Cyber Security / Computer Science / IT

Job description

For more than 20 years, KordaMentha has supported businesses through some of their most complex matters and opportunities. Founder owned and led; we are an advisory firm that helps corporations, financiers, lawyers, private investors and government clients to grow, protect and recover value.

That’s what we do, but it’s how we do this that makes us who we are.

Proudly independent, strategically local, and with a bias for action to get things done, we focus on doing what is right by our clients, our people, and the wider community. Our track record shows that we help navigate the best path forward in challenging times, and do so across cities, regions and territories.

In the most stressful or demanding environments, we continue to drive change where it really counts.

Job Description

We are looking for an experienced Digital Forensics & Incident Response (DFIR) professional to join our Forensic team in Auckland at a Manager level.

This is an opportunity to take a key role in delivering complex digital forensic investigations and cyber incident response engagements, working closely with senior leaders in Auckland and our broader Forensic Technology team in Australia.

You will work across matters involving digital evidence collection, forensic examination, incident response, data analysis and the preparation of clear, defensible investigation reports.

This role will involve some domestic travel across New Zealand to support evidence collection and client engagements.

Key responsibilities:

• Support with leading and delivering digital forensic investigations and cyber incident response engagements.
• Undertake forensic collection, preservation and analysis of electronic evidence across computers, mobile devices, cloud repositories and other digital sources.
• Conduct forensic examinations and analyse data to identify relevant evidence, patterns and findings.
• Prepare clear, accurate and high-quality investigation, forensic and metadata analysis reports.
• Manage technical workstreams with a high degree of autonomy while collaborating with multidisciplinary teams.
• Work directly with clients and senior stakeholders, translating complex technical findings into clear, practical insights.
• Support engagements involving corporate, government, insurance and other organisations.
• Collaborate with the Auckland and Australian teams to deliver work across the broader Forensic Technology practice.

Qualifications

We are open to candidates from professional services, consulting, law enforcement or government backgrounds who can bring strong technical capability and adapt their experience to a client-focused consulting environment.

You will ideally bring:

• 5 to 6 years of demonstrated experience delivering digital forensic investigations and/or cyber incident response engagements.
• Strong knowledge of digital forensic processes, electronic evidence and evidence integrity.
• Practical experience collecting and examining electronic devices and data, including computers, mobile devices and cloud-based repositories.
• Strong understanding of IT, information security, IT infrastructure, operating systems, computers and networks.
• The ability to independently undertake digital forensic examinations and produce high-quality reports.
• Strong analytical capability and attention to detail when working with complex technical information.
• Excellent written and verbal communication skills, with the confidence to present technical findings clearly to non-technical stakeholders.
• Strong project and time management skills, with the ability to deliver high-quality work in demanding environments.
• A collaborative approach, with the ability to work both autonomously and as part of a broader team.
• A willingness to contribute to client development activities and support the continued growth of our Digital Forensics capability in Auckland.
• A tertiary qualification in Cyber Security, Computer Science, Information Technology or a related discipline is highly regarded, while relevant practical experience will also be considered.

Additional Information

Join KordaMentha — Build your future, shape ours

We don’t just hire talent; we invest in it - with support that accelerates your success in every way

• Professional development: Expert mentorship, tailored training via KordaMentha Business School, study support, and our Accelerate program for Analysts to Associate Directors — build your brand, expand your network, and gain strategic insights from senior leaders
• Flexibility: We champion work/life integration with options that fit your lifestyle.
• Career growth: Merit-based promotions, secondments, and opportunities to work alongside senior leaders on impactful projects.
• Leave that works for you: Buy extra leave and access volunteer, generous parental leave and career break options.
• Culture & connection: Social events, cultural celebrations, and our bi-ennial black-tie ball.
• Family support: Flexible parental leave, return-to-work support.
• Health & wellbeing: Inclusive wellness initiatives and confidential and industry leading EAP for you and your family.

This isn’t just a job - it’s a place where your ambitions are nurtured, your wellbeing is valued, and your contributions celebrated. Ready to shape your future with us?