Digital Forensic Investigator

SNG GrantThornton; Gauteng; On-site; ZAR 600,000 - 900,000; Full time

Job summary

SNG GrantThornton is seeking a Digital Forensics Investigator in Gauteng to support forensic investigations by collecting, preserving, analysing, and reporting on digital evidence. You will uncover fraud, misconduct, and cyber incidents using forensic methodologies and tools.

Responsibilities include handling digital evidence, performing forensic analysis, supporting investigations, and delivering detailed reports for clients and regulators.

Qualifications

• Degree in Computer Science, Information Systems, Digital Forensics, or related field.
• 2–5 years experience in digital forensics, data analysis, IT audit, or cyber investigations.
• Experience with forensic tools and reporting.

Responsibilities

• Acquire and preserve digital evidence following forensic best practices.
• Conduct forensic imaging of devices and maintain chain of custody.
• Analyse data to identify fraud, breaches or misconduct.
• Prepare clear forensic reports and support legal/regulatory matters.
• Identify indicators of compromise and support incident response.

Skills

Digital Forensics

Data Analytics

Incident Response

Education

Computer Science Degree

Tools

Forensic Tools

Job description

Digital Forensics Investigator

Role Purpose

To support forensic investigations by collecting, preserving, analysing, and reporting on digital evidence. The role focuses on uncovering fraud, misconduct, and cyber-related incidents through the application of digital forensic methodologies and tools.

Key Responsibilities

Digital Evidence Handling

• Acquire and preserve digital evidence in line with forensic best practices
• Maintain strict chain of custody for all evidence collected
• Conduct forensic imaging of devices (laptops, servers, mobile devices)

Forensic Analysis

• Analyse digital data to identify fraud, data breaches, or misconduct
• Recover deleted, encrypted, or hidden data
• Perform email, file system, and log analysis

Investigations Support

• Work closely with forensic investigators, legal teams, and clients
• Assist in fraud investigations, litigation support, and regulatory matters
• Compile clear, defensible forensic reports

Cyber & Data Analytics

• Identify indicators of compromise and suspicious activity
• Support incident response and cyber investigations
• Use data analytics to detect anomalies and trends

Reporting & Testimony

• Prepare detailed forensic reports for internal and external stakeholders
• Present findings in a clear and professional manner
• Support legal proceedings where required

Minimum Requirements

Qualifications

• Degree in Computer Science, Information Systems, Digital Forensics, or related field

Experience

• 2-5 years' experience in digital forensics, data analysis, IT audit, or cyber investigations
• Experience with forensic tools

Certifications (Advantageous)

• CISA (Certified Information Systems Auditor)
• CHFI (Computer Hacking Forensic Investigator)
• EnCE, NUIX, CCO or similar forensic application certifications
• Professional memberships (ICFP or ACFE)