Digital Computer Forensic Manager – Toronto

The Forensics team is growing a national practice dealing with fraud investigations, technology abuses, cyber-crime, cyber-breach, and litigation support offering a complete range of client services pertaining to computer forensics and investigations. Forensic engagements include complex domestic and international investigations pertaining to litigation, corporate fraud, class action lawsuits and regulatory matters, to name but a few. You’ll have an opportunity to develop your skills in these areas, in addition to taking part in national and international projects. The team works with industry-leading technologies and leverages a global One Deloitte team to provide creative and innovative solutions to complex engagements. The team has strong leadership and works closely together, sharing knowledge and helping each other learn and excel!

The Computer Forensic manager will be responsible for a team of digital forensic specialists for data collection and preservation, compiling, interpreting and analyzing electronic data for investigation and litigation purposes. Additional responsibilities include:

• Managing a digital forensic specialist team and providing guidance, industry knowledge and best practice for challenging and complex forensic investigations.
• Produce high-quality oral and written work products and deliver expert fact-based opinions based on analysis.
• Help with the career development, mentorship and technical development of junior staff.
• Liaise with other service lines to provide digital forensic support in their investigations.
• Promote, maintain and adhere to support digital evidence collection, the chain of custody protocols, and proper storage of digital assets.
• Attend client sites to perform work (when and where required).
• Prepare SOW/LOE for engagements, budgets and identify resources.
• Support and demonstrate positive firm initiatives in complying with internal procedures (time entry, resource monitoring, independence, security clearance).
• Monitor and approve vacation requests while maintaining proper coverage for ongoing engagements.
• Supporting development and implementation of non-technical procedures (evidence management, customer relationship management portal, internal compliance trainings)
• Responsible for managing projects and monitoring the quality of work performed on digital forensic engagements.
• Project manage multiple engagements while maintaining quality deliverables.
• Effectively lead the planning and execution of Forensic and Investigative projects, including compiling electronic data, performing analysis and preparing recommendations.
• Correspondence with clients, lawyers, and internal contacts to discuss file issues and present our findings.
• Develop and maintain client relationships at the highest level.
• Actively participate and lead initiatives in business development activities.
• Preparing deliverable data in a meaningful contextual format suited to client needs.
• Support preparation for regular reports out and or updates to senior internal management.
• Develop and refine policies and procedures for digital forensic analyses.
• Provide preparation/oversight of proposals in answer to clients’ requests for proposals, including large, multi-disciplinary projects
• Play an integral role in talent development through coaching, mentoring and training junior staff.
• Conduct project, team and individual performance reviews and provide continuous feedback on junior staff performance.

The Forensic team members work closely with forensic accountants, lawyers, litigation support teams, document review teams, clients, and investigators to produce analysis, expertise, and advice in support of investigations and litigation matters. This is not a back-office role, but rather a position in which you will enter direct and frequent communication with all levels of stakeholders on engagements.

Given the nature of the work involved, a flexible work schedule and availability to travel inside and outside Canada are essential for all individuals joining the Forensic team. Candidates should also be able to obtain a ”secret” level II security clearance from the Canadian government, as well as a U.S. work visa.

Candidates should possess excellent verbal and written communication skills in English (French would be an asset). They should also have information security experience (an asset), together with a degree from a recognized university or College in any of the following disciplines (or equivalent):

• Computer science
• Information Technology
• Information systems
• Business Intelligence
• Cyber Fraud
• Cyber Investigations

Deloitte’s Forensic services professionals identify and resolve various types of corporate disputes and irregularities. We also carry out analyses, provide opinions and draft clear, logical reports. We apply a variety of quantitative and qualitative techniques aimed at identifying and analyzing presumed damages stemming from the following cases: business interruptions, broken contracts, negligence, breaches of obligations, intellectual property violations and other similar situations. We quantify actual or potential losses while helping our clients reduce their fraud-related risks, tracing misappropriated funds and resolving business and financial disputes on a fast-track basis.

Our Toronto office is currently seeking a Senior Associate on the Forensics and Discovery Team.

You are someone with:

• Bachelor’s Degree or Diploma in Computer Science, IT, or related field or equivalent experience.
• 8-10 years of experience or relevant education.
• Technical knowledge of hardware and software.
• Litigation support, technological investigations and eDiscovery.
• Solid system administration and infrastructure experience.
• Understanding of the Electronic Discovery Reference Model (EDRM).
• Fluency in working with at least one or more of the following software tools: Encase, Axiom, X-Ways, FTK, IEF.
• Minimum three (3) years of experience in an advisory or external consulting capacity
• Strong understanding of Microsoft and Apple OS structure and artifacts.
• Strong understanding of File Systems including FAT, FAT32, NTFS, HFS, HFS+.
• Strong understanding of mobile device preservation and related analysis for Android, Apple and Blackberry devices.
• Experience with Cellebrite, Oxygen or other mobile device preservation and analysis software.
• Experience with the following software is highly desirable: Nuix, Relativity, EDT, SQL, Oracle, SAS.
• Experience working in a fast-paced project environment under tight timelines and varying hours of work.
• Excellent research and analytical skills with the ability to clearly and articulately identify and define problems and develop creative solutions to address client needs.
• Strong writing skills, including the ability to develop detailed technical reports and executive summaries.
• A proven ability to work in a collaborative team environment.
• Comfort with receiving and providing feedback.
• Proven relationship development and management skills with demonstrated ability to interact, establish credibility and engender trust with a wide range of professionals across all levels.
• You will be required to undergo a criminal record check and obtain a Secret level Government of Canada security clearance.
• The ability to travel on short notice for 1-7 days may be required when a return to the workplace and travel is possible.

Working knowledge of the following tools (but not limited to):

• Forensic tools (EnCase, FTK, Cellebrite, X-Ways, Forensic Explorer)
• eDiscovery tools (Relativity, Nuix, Clearwell, dtSearch, iPro)
• Database administration and Languages (MS-SQL, Oracle, T-SQL, PL-SQL)