Manager, Digital Forensics & Incident Response Investigator

Globe Telecom, Inc.; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

GCash, the Philippines’ leading FinTech app, seeks an Investigation Manager in Metro Manila to oversee cyber incident investigations, preservation of digital evidence, and crisis response efforts. You will coordinate with IT, security, and legal teams and drive evidence collection and analysis to support decisive actions.

You will lead development of incident response plans, conduct forensic examinations, and produce clear reports for stakeholders.

Responsibilities

• Oversee investigation of cyber incidents including data breaches, unauthorized access, malware infections, and other cybercrimes.
• Develop investigation plans and strategies to ensure comprehensive evidence collection and analysis.
• Coordinate with internal teams (IT, security, legal) and external stakeholders (law enforcement, regulatory bodies) during investigations.
• Ensure proper identification, collection, and preservation of digital evidence following protocols.
• Create forensic images of digital devices and storage media.
• Maintain a secure chain of custody for all evidence collected.
• Analyze digital evidence to uncover information such as file history, user activities, network traffic, and deleted data.
• Utilize forensic tools and methodologies including disk imaging, memory analysis, and network forensics.
• Reconstruct events and timelines based on digital artifacts.
• Participate in or lead incident response efforts for significant cyber incidents.
• Work with cybersecurity teams to mitigate threats and prevent further damage.
• Develop and maintain incident response plans and protocols.
• Prepare detailed reports outlining findings, methods, and evidence.
• Present evidence to technical and non-technical stakeholders; provide expert testimony when required.
• Stay updated on trends, tools, and techniques; train team and other departments.

Tools

Disk imaging

Memory analysis

Network forensics

Job description

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba?

Investigation Management

• Oversee the investigation of cyber incidents, including data breaches, unauthorized access, malware infections, and other cybercrimes.
• Develop investigation plans and strategies to ensure comprehensive evidence collection and analysis.
• Coordinate with internal teams (e.g., IT, security, legal) and external stakeholders (e.g., law enforcement, regulatory bodies) during investigations.

Digital Evidence Collection and Preservation

• Ensure the proper identification, collection, and preservation of digital evidence following legal and organizational protocols.
• Use specialized tools and techniques to create forensic images of digital devices and storage media.
• Maintain a secure chain of custody for all evidence collected.

Data Analysis and Forensic Examination

• Analyze digital evidence to uncover relevant information, such as file history, user activities, network traffic, and deleted data.
• Utilize advanced forensic tools and methodologies, such as disk imaging, memory analysis, and network forensics.
• Reconstruct events and timelines based on the analysis of digital artifacts.

Incident Response and Crisis Management

• Participate in or lead incident response efforts for significant cyber incidents.
• Work with other cybersecurity teams to mitigate ongoing threats and prevent further damage.
• Develop and maintain incident response plans and protocols.

Reporting and Documentation

• Prepare detailed reports outlining the findings of investigations, including the methods used and evidence discovered.
• Present evidence and conclusions in a clear and concise manner for both technical and non-technical stakeholders.
• Provide expert testimony in legal proceedings, when required.

Continuous Improvement and Training

• Stay updated on the latest trends, tools, and techniques in digital forensics and cybersecurity.
• Implement new technologies and methodologies to enhance forensic capabilities.
• Conduct regular training sessions for the team and other departments on digital forensics and incident response.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package is the #1 Finance App in the Philippines.

Through the GCash App, 81M registered users can easily purchase prepaid airtime; purchase from over 6M partner merchants and social sellers; send and receive money anywhere in the Philippines, even to other bank accounts; pay bills at over 1,800 partner billers nationwide; and get access to savings, credit, loans, insurance and investments, and so much more, all at the convenience of their smartphones.

GCash is a wholly-owned subsidiary of Mynt (Globe Fintech Innovations, Inc.) since 2015. Mynt, Inc. is the parent company of GCash, the Philippines’ #1 finance superapp, advancing financial inclusion through ‘Finance for All’. G-Xchange, Inc. (GXI) is the payments company for GCash. GXI is a BSP-licensed e-money issuer responsible for the digital payments and electronic money activities in the GCash app. Fuse Financing, Inc. is the financing company for GCash. Fuse provides eligible users with access to fair and digitally-enabled credit products and solutions. Ryse, Inc. broadens access to investments that are easy to use and understand, supporting wealth‑building for Filipinos at different stages of their financial journey. BlockG Virtual Assets, Inc. supports responsible participation in digital assets, helping build trust and long‑term confidence in the continuously evolving digital landscape.