Forensic Cyber Technologist

Financial Intelligence Centre (FIC; Gauteng; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Financial Intelligence Centre (FIC) seeks a skilled digital forensics professional to coordinate investigations and oversee the collection and analysis of digital financial evidence. You will prepare formal reports, maintain chain of custody, and support court proceedings where required.

The role involves collaborating with forensic accounting and law enforcement teams, performing advanced data analysis, and contributing to training on cybercrime methods and best practices.

Qualifications

• Bachelor-level or higher in digital forensics, cyber security, information technology or related field.
• Certification in GCFA is preferred.
• CHFI certification preferred.
• CEDS certification preferred.
• ACFE CFE certification preferred.
• ICFP certification preferred.

Responsibilities

• Coordinate and oversee investigations of complex financial crimes using digital evidence.
• Gather evidence from devices, cloud services, networks and other sources.
• Prepare forensic reports and affidavits for stakeholders in compliance with policies.
• Maintain chain of custody and proper documentation for digital evidence.
• Collaborate with forensic accounting and law enforcement teams; provide testimony when required.
• Advise on cybercrime methodologies and contribute to training and knowledge transfer.

Education

Degree in Digital Forensics/Related Field

GCFA Certification

CHFI Certification

CEDS Certification

ACFE – CFE Certification

ICFP Certification

Job description

Financial Intelligence Centre -> State Forensic Capability

Job Type

Permanent

Education

skilled and academically qualified

Location

Travel

0 - 10%

Desired Race

African, Coloured

Desired Gender

Male

Closing Date

27/10/2026

The FIC is an equal opportunity employer. Preference will be given to suitably qualified applicants in line with our employment targets and our commitment to diversifying our workforce. As part of our recruitment and selection process, persons with disabilities are encouraged to apply. All appointments are subject to satisfactory reference checks and security clearance.

Job Description

JOB PURPOSE

Coordinate and oversee the investigation and prosecution of complex financial crimes through technical knowledge and expertise in the gathering, analysis, verification and interpretation of digital evidence in order to support the overall strategic direction and targets of the forensic capability division.

KEY PERFORMANCE AREA

Forensic Evidence Data Collection and Analysis

• Explore and gather key digital financial intelligence and evidence from relevant digital devices, storage media, cloud services, and networks to support evidence production for legal proceedings.
• Determine the relevance and completeness of evidence information and/or evidence and ensure that all gaps in information are addressed.
• Support data integrity by ensuring that all digital intelligence and evidence are verified within reasonable parameters and line of sight.
• Analyse digital evidence from law enforcement and external stakeholders, using eDiscovery and other ICT software in order to produce quality evidence-based information.
• Perform blockchain and cryptocurrency transaction tracing using tools relevant tools to support the production of digital evidence.
• Reconstruct digital trails to trace illicit financial flows.
• Conduct analysis of financial intelligence and evidence within acceptable quality norms required.
• Identify and investigate discrepancies, patterns and connections between digital financial intelligence information and evidence sources to support evidence integrity.
• Analyse potential risk associated with relevant financial crime.

Forensic Evidence Reporting

• Maintain the chain of custody and documentation for digital evidence ensuring compliance to best practice forensic methodologies.
• Prepare forensic reports or affidavits for mandated stakeholders by the agreed due dates and in compliance with relevant legislation, policies, procedures and annual targets.
• Contextualise digital financial information and/or evidence in support of law enforcement efforts by capturing findings and conclusions in the required reporting format and systems and submit investigation outcomes, trends and recommendations as prescribed by relevant policies and procedure.
• Summarise and present digital financial information in a manner that supports evidence-based products.
• Utilise computerised applications such as spreadsheets, databases or computer models to produce charts and graphics to explain findings.
• Provide support to the forensic accounting team when required to produce forensic reports or affidavits.
• Review forensic reports by the forensic accounting team when required and ensure that they comply with agreed standards and support annual targets.
• Collaborate with the forensic accounting team for the review and approval of forensic reports.
• Facilitate the handing over of evidence to designated authorities.
• Assist in legal proceedings, including testifying in court regarding digital forensic report findings and prepare visual aids to substantiate findings.
• Conduct research on cybercrime methodologies and assist in drafting reports.

Forensic Evidence Advocacy and Awareness

• Provide technical advocacy, training and/or awareness to relevant stakeholders on digital financial crime components.
• Assist in compiling reports and case studies for training purposes and benchmarking.
• Participate in the transfer of skills to team members to enhance overall effectiveness and capacity.
• Advise management of digital financial intelligence and evidence challenges as appropriate.
• Stay informed on emerging cyber threats, block chain darknet platforms, eDiscovery and privacy-enhancing technologies and provide advocacy to relevant stakeholders to support risk management of such threats.

Stakeholder Management

• Coordinate and lead meetings with stakeholders to gain insights and determine requirements for forensic evidence support.
• Ensure continuous stakeholder interface for seeking clarities, closing gaps, and enriching the data integrity of the forensic reports and affidavits.
• Represent the organisation at working groups, meetings, conferences and seminars when required.
• Utilise investigative experience and technical knowledge to work with the law enforcement agencies to investigate or prosecute serious or complex financial crimes

Risk and Compliance Management

• Assist in the development and enhancement of standards, processes, policies, and roles within the Forensic Capability division.
• Provide input into tactical plans and targets when required.
• Implement fraud controls, risk prevention principles, sound governance and compliance processes, and tools to identify and manage risks with the business unit.
• Identify technical equipment needs for digital evidence acquisition.
• Assist in monitoring changes in the regulatory environment and the implementation of appropriate operational controls to address new requirements.
• Support and provide evidence to internal and external audit requirements when required.
• Maintain quality risk management standards in line with the organisation’s risk management framework.
• Maintain and enforce all forensic related Service Level Agreements to minimise business risk and ensure business continuity.
• Adhere to all relevant laws, policies and Standard Operating Procedures throughout the organisation.

EDUCATIONAL AND EXPERIENCE REQUIREMENTS

• Degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology or related field
• 4 Years in Digital Forensics, Computer Science, Cybersecurity, Information Technology or related field
• GIAC Certified Forensic Analyst (GCFA)-Certification Preferred
• Computer Hacking Forensic Investigator (CHFI)-Certification Preferred
• Certified E-Discovery Specialist (CEDS)-Certification Preferred
• Association of Certified Fraud Examiners - ACFE – CFE-Certification Preferred
• Institute of Commercial Forensic Practitioners (ICFP)-Certification Preferred