Digital Forensic Investigator

SNG GrantThornton; Midrand; On-site; ZAR 420,000 - 660,000; Full time

Job summary

SNG Grant Thornton in Midrand, Gauteng, is looking for a Digital Forensics Investigator to support investigations by collecting, preserving, analysing, and reporting on digital evidence. The role targets fraud, misconduct and cyber incidents through forensic methodologies and tools.

Responsibilities include acquiring digital evidence with strict custody, forensic imaging, data recovery, data and log analysis, and preparing clear forensic reports for internal and external stakeholders.

Qualifications

• Degree in Computer Science, Information Systems, Digital Forensics, or related field.
• 2–5 years' experience in digital forensics, data analysis, IT audit, or cyber investigations.
• Experience with forensic tools such as EnCase, FTK or NUIX.

Responsibilities

• Acquire and preserve digital evidence in line with forensic best practices.
• Maintain chain of custody for all evidence collected.
• Conduct forensic imaging of devices (laptops, servers, mobile devices).
• Analyse digital data to identify fraud, data breaches, or misconduct.
• Recover deleted, encrypted, or hidden data; perform email, file system, and log analysis.
• Work with investigators, legal teams, and clients; compile clear forensic reports.

Skills

Digital forensics

Data analysis

Cyber investigations

IT audit

Forensic tools

Education

Bachelor's degree in Computer Science, Information Systems, Digital Forensics, or related field

Tools

EnCase

FTK

NUIX

Job description

Digital Forensics Investigator

Role Purpose

To support forensic investigations by collecting, preserving, analysing, and reporting on digital evidence. The role focuses on uncovering fraud, misconduct, and cyber-related incidents through the application of digital forensic methodologies and tools.

Key Responsibilities

Digital Evidence Handling

• Acquire and preserve digital evidence in line with forensic best practices
• Maintain strict chain of custody for all evidence collected
• Conduct forensic imaging of devices (laptops, servers, mobile devices)

Forensic Analysis

• Analyse digital data to identify fraud, data breaches, or misconduct
• Recover deleted, encrypted, or hidden data
• Perform email, file system, and log analysis

Investigations Support

• Work closely with forensic investigators, legal teams, and clients
• Assist in fraud investigations, litigation support, and regulatory matters
• Compile clear, defensible forensic reports

Cyber & Data Analytics

• Identify indicators of compromise and suspicious activity
• Support incident response and cyber investigations
• Use data analytics to detect anomalies and trends

Reporting & Testimony

• Prepare detailed forensic reports for internal and external stakeholders
• Present findings in a clear and professional manner
• Support legal proceedings where required

Minimum Requirements

Qualifications

• Degree in Computer Science, Information Systems, Digital Forensics, or related field

Experience

• 2-5 years' experience in digital forensics, data analysis, IT audit, or cyber investigations
• Experience with forensic tools

Certifications (Advantageous)

• CISA (Certified Information Systems Auditor)
• CHFI (Computer Hacking Forensic Investigator)
• EnCE, NUIX, CCO or similar forensic application certifications
• Professional memberships (ICFP or ACFE)