Forensic eDiscovery Collection Specialist

Charles Schwab; Westlake (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k) with company match

Paid vacation and sabbatical after 5+;

Parental leave and family benefits

Tuition reimbursement

Health, dental, and vision insurance

Job summary

Charles Schwab is expanding its eDiscovery team and seeks a Forensic eDiscovery Collection Specialist. You will perform defensible collections across endpoints, mobile, cloud, and enterprise sources, preserving evidentiary integrity and chain of custody.

You will collaborate with legal, business, and IT teams to scope collections, apply approved tools, and document methodologies. The role emphasizes quality controls and data security in litigation and regulatory workflows.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field; equivalent work experience may be considered.
• Minimum two years of experience in eDiscovery, digital forensics, DFIR, information security investigations, enterprise data acquisition, or related fields.
• Strong understanding of eDiscovery processes, including the EDRM, legal holds, retention, and data privacy requirements.
• Hands-on experience collecting across endpoints, mobile, cloud, and enterprise sources using tools such as Relativity, Exterro, WinSCP, Cellebrite, EnCase.
• Knowledge of chain of custody, evidence handling, hashing, forensic imaging, secure transfer, and collection documentation standards.
• Excellent analytical, problem-solving skills, attention to detail, and commitment to data integrity and quality control.
• Excellent written, verbal, and technical documentation skills; discretion with confidential information.

Responsibilities

• Conduct defensible preservation and collection of ESI from enterprise systems, email, cloud, and collaboration sources.
• Collaborate with stakeholders to scope collection efforts and resolve access and technical questions.
• Use approved tools to perform imaging, targeted collection, hashing, export, and validation with chain-of-custody control.
• Maintain detailed evidence inventories and collection notes with methodologies and validation data.
• Preserve data integrity, security, and confidentiality during collection and transfer.
• Perform quality-control checks, validation, and reconciliation of collected data.
• Securely stage, encrypt, transfer, and reconcile data for RelativityOne and downstream workflows.
• Develop and improve collection methodologies, procedures, and job aids.

Skills

eDiscovery

Digital forensics

DFIR

Information security investigations

Enterprise data acquisition

Education

Bachelor’s degree in IT / CS / related field

Tools

Relativity

Exterro

WinSCP

Cellebrite

EnCase

Microsoft 365

Job description

Your opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

Schwab’s expanding eDiscovery organization is strengthening its internal capability to preserve and collect electronically stored information across a complex enterprise environment. As a Forensic eDiscovery Collection Specialist, you will conduct defensible collections across endpoint, mobile, cloud, email, collaboration, and enterprise data sources while protecting evidentiary integrity, confidentiality, and chain of custody.

Your work will help shape consistent collection standards, documentation practices, and quality controls that support Schwab’s modernized eDiscovery operating model. You will solve technical challenges, make informed decisions when collection risks or source limitations arise, and collaborate with legal partners, business stakeholders, system owners, and service providers. By applying analytical thinking, attention to detail, and adaptability, you will improve scalable processes and help ensure collected information is complete, accurate, secure, and ready for litigation, regulatory, and downstream eDiscovery workflows.

Key Responsibilities

• Conduct thorough and defensible preservation and collection of ESI from enterprise systems, email, cloud and collaboration platforms, network locations, and other approved sources.
• Collaborate with business stakeholders and system owners to scope collection efforts and resolve access, retention, and technical-source questions.
• Use approved tools and procedures to perform forensic imaging, targeted collection, hashing, export, and validation while maintaining chain of custody and evidentiary integrity.
• Maintain detailed evidence inventories, chain-of-custody records, collection notes, scope decisions, methodologies, tools used, validation data, exceptions, and issues encountered.
• Preserve the integrity, security, and confidentiality of collected information and ensure data is protected from alteration, loss, or corruption.
• Conduct quality-control checks, validation, and reconciliation to confirm the completeness and accuracy of collected data.
• Securely stage, encrypt, transfer, and reconcile collected data for RelativityOne, downstream eDiscovery workflows, or approved service providers.
• Develop, document, and continuously improve collection methodologies, technical procedures, quality controls, source documentation, and job aids to support repeatability, defensibility, and auditability.
• Stay informed about eDiscovery and digital-forensics technologies and best practices, and apply relevant developments to improve collection processes.
• Support declarations, depositions, or testimony regarding collection methods and validity, as needed, and elevate collection limitations, preservation risks, source gaps, and unexpected findings.

What you have

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field. Equivalent relevant work experience may be considered.
• Minimum two years of experience in eDiscovery, digital forensics, forensic technology, DFIR, information security investigations, enterprise data acquisition, or a related field.
• Strong understanding of eDiscovery processes, including the EDRM, legal holds, retention, records management, and relevant data privacy and protection requirements.
• Hands‑on experience conducting defensible collections across endpoint, mobile, cloud, and enterprise data sources using commercially recognized forensic and collection tools such as Relativity, Exterro, WinSCP, Cellebrite, and EnCase.
• Knowledge of chain of custody, evidence handling, hashing, forensic imaging, secure transfer, and collection documentation standards.
• Excellent analytical and problem‑solving skills, with strong attention to detail and a commitment to data integrity and quality control.
• Ability to manage multiple projects simultaneously, scope work with legal and technical teams, and meet deadlines.
• Excellent written, verbal, and technical‑documentation skills, with the ability to communicate effectively with technical and non‑technical stakeholders.
• High degree of professionalism and discretion when handling confidential and legally sensitive information.

Preferred Qualifications

• Experience in financial services or other highly regulated industries.
• Experience with Microsoft 365, cloud‑based collections, or mobile device collections.
• Certification in eDiscovery and/or digital forensics, such as CFCE, EnCE, CEDS, GCFE, or GCFA, is highly preferred.
• Experience supporting litigation, regulatory investigations, or enterprise legal matters.
• Knowledge of information governance and records management principles.
• Experience collecting Microsoft 365, cloud collaboration, messaging, and mobile‑device data.
• Financial‑services or other regulated‑industry experience.
• Experience working under the direction of counsel.

What’s in it for you

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance