Forensic Cyber Technologist at Financial Intelligence Centre

Financial Intelligence Centre; Pretoria; On-site; ZAR 600,000 - 1,200,000; Full time

Job summary

The Financial Intelligence Centre seeks a capable Forensic Investigator to coordinate complex financial crime investigations using advanced digital evidence gathering, analysis, and reporting. You will work with law enforcement and other agencies, ensuring data integrity and compliance with procedures.

Responsibilities include maintaining chain of custody, preparing affidavits, and supporting legal proceedings with expert testimony and visual aids.

Qualifications

• Degree in Digital Forensics, Computer Science, Cybersecurity or related field.
• 4 Years in Digital Forensics, Computer Science, Cybersecurity, Information Technology or related field.
• GIAC GCFA-Certification preferred, CHFI-Certification preferred, CEDS-Certification preferred.
• ACFE-CFE-Certification preferred, ICFP-Certification preferred, EnCE-Certification preferred.

Responsibilities

• Coordinate and oversee the investigation and prosecution of complex financial crimes with digital evidence.
• Maintain chain of custody and documentation for digital evidence.
• Prepare forensic reports or affidavits for mandated stakeholders on time.
• Contextualise digital financial information in reporting formats and systems.
• Collaborate with forensic accounting team to review and approve forensic reports.
• Assist in legal proceedings, including testifying in court regarding digital forensic findings.

Skills

Digital forensics

eDiscovery

Blockchain analysis

Data integrity

Legal reporting

Education

Degree in Digital Forensics, CS, Cybersecurity or related field

4 Years in related field

GIAC GCFA Certification

CHFI Certification

CEDS Certification

ACFE CFE Certification

ICFP Certification

EnCE Certification

Tools

eDiscovery software

Job description

Job Purpose

Coordinate and oversee the investigation and prosecution of complex financial crimes through technical knowledge and expertise in the gathering, analysis, verification and interpretation of digital evidence in order to support the overall strategic direction and targets of the forensic capability division.

KEY PERFORMANCE AREA

Forensic Evidence Data Collection and Analysis

• Explore and gather key digital financial intelligence and evidence from relevant digital devices, storage media, cloud services, and networks to support evidence production for legal proceedings.
• Determine the relevance and completeness of evidence information and/or evidence and ensure that all gaps in information are addressed.
• Support data integrity by ensuring that all digital intelligence and evidence are verified within reasonable parameters and line of sight.
• Analyse digital evidence from law enforcement and external stakeholders, using eDiscovery and other ICT software in order to produce quality evidence-based information.
• Perform blockchain and cryptocurrency transaction tracing using tools relevant tools to support the production of digital evidence.
• Reconstruct digital trails to trace illicit financial flows.
• Conduct analysis of financial intelligence and evidence within acceptable quality norms required.
• Identify and investigate discrepancies, patterns and connections between digital financial intelligence information and evidence sources to support evidence integrity.
• Analyse potential risk associated with relevant financial crime.

Forensic Evidence Reporting

• Maintain the chain of custody and documentation for digital evidence ensuring compliance to best practice forensic methodologies.
• Prepare forensic reports or affidavits for mandated stakeholders by the agreed due dates and in compliance with relevant legislation, policies, procedures and annual targets.
• Contextualise digital financial information and/or evidence in support of law enforcement efforts by capturing findings and conclusions in the required reporting format and systems and submit investigation outcomes, trends and recommendations as prescribed by relevant policies and procedure.
• Summarise and present digital financial information in a manner that supports evidence-based products.
• Utilise computerised applications such as spreadsheets, databases or computer models to produce charts and graphics to explain findings.
• Provide support to the forensic accounting team when required to produce forensic reports or affidavits.
• Review forensic reports by the forensic accounting team when required and ensure that they comply with agreed standards and support annual targets.
• Collaborate with the forensic accounting team for the review and approval of forensic reports.
• Facilitate the handing over of evidence to designated authorities.
• Assist in legal proceedings, including testifying in court regarding digital forensic report findings and prepare visual aids to substantiate findings.
• Conduct research on cybercrime methodologies and assist in drafting reports.

Forensic Evidence Advocacy and Awareness

• Provide technical advocacy, training and/or awareness to relevant stakeholders on digital financial crime components.
• Assist in compiling reports and case studies for training purposes and benchmarking.
• Participate in the transfer of skills to team members to enhance overall effectiveness and capacity.
• Advise management of digital financial intelligence and evidence challenges as appropriate.
• Stay informed on emerging cyber threats, block chain darknet platforms, eDiscovery and privacy-enhancing technologies and provide advocacy to relevant stakeholders to support risk management of such threats.

Stakeholder Management

• Coordinate and lead meetings with stakeholders to gain insights and determine requirements for forensic evidence support.
• Ensure continuous stakeholder interface for seeking clarities, closing gaps, and enriching the data integrity of the forensic reports and affidavits.
• Represent the organisation at working groups, meetings, conferences and seminars when required.
• Utilise investigative experience and technical knowledge to work with the law enforcement agencies to investigate or prosecute serious or complex financial crimes

Risk and Compliance Management

• Assist in the development and enhancement of standards, processes, policies, and roles within the Forensic Capability division.
• Provide input into tactical plans and targets when required.
• Implement fraud controls, risk prevention principles, sound governance and compliance processes, and tools to identify and manage risks with the business unit.
• Identify technical equipment needs for digital evidence acquisition.
• Assist in monitoring changes in the regulatory environment and the implementation of appropriate operational controls to address new requirements.
• Support and provide evidence to internal and external audit requirements when required.
• Maintain quality risk management standards in line with the organisation's risk management framework.
• Maintain and enforce all forensic related Service Level Agreements to minimise business risk and ensure business continuity.
• Adhere to all relevant laws, policies and Standard Operating Procedures throughout the organisation.

Educational And Experience Requirements

• Degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology or related field
• 4 Years in Digital Forensics, Computer Science, Cybersecurity, Information Technology or related field
• GIAC Certified Forensic Analyst (GCFA)-Certification Preferred
• Computer Hacking Forensic Investigator (CHFI)-Certification Preferred
• Certified E-Discovery Specialist (CEDS)-Certification Preferred
• Association of Certified Fraud Examiners - ACFE - CFE-Certification Preferred
• Institute of Commercial Forensic Practitioners (ICFP)-Certification Preferred
• EnCase Certified Examiner (EnCE)-Certification Preferred