Investigator, Digital Forensics

Role overview

This position focuses on responding to cyber security incidents and carrying out detailed digital forensic investigations across the Standard Bank Group. The work must align with the Group Digital Forensic Investigation Framework and related standards, with the aim of identifying, preserving, examining, and documenting digital evidence tied to fraud, cybercrime, misconduct, insider threats, and data breaches.

The role is intended to strengthen the organisation’s ability to detect, investigate, and reduce digitally enabled crime and cyber risk, while helping limit operational loss, regulatory exposure, and reputational harm.

Qualifications

A bachelor’s degree in Digital Forensics, Cyber Security, Computer Science, Information Security, Information Systems, or a closely related discipline is required.

Preferred certifications

• GCFA, GCFE, GNFA, or GCTI
• EnCE, CFCE, CCE, or CHFI
• CISSP or CISM
• Microsoft Security certifications
• AWS Security Specialty
• Google Professional Cloud Security Engineer

Experience

The role calls for 5 to 7 years of experience in digital forensics, incident response, cyber investigations, or a similar area. Candidates should have hands-on exposure to cloud forensic work, cyber incident response, mobile device forensics, and Microsoft 365 investigations. Experience writing evidential reports and presenting findings to senior leaders, regulators, and legal teams is also important.

Behavioural competencies

• Ability to take a practical approach
• Clear and effective communication of information
• Careful verification and checking
• Continuous development of specialist expertise
• Strong analytical review of information
• Curiosity and willingness to explore options
• Consistent adherence to procedures
• Skill in interpreting data
• Ability to work to deadlines
• Providing useful insights
• Collaborative teamwork
• Commitment to standards and compliance

Technical competencies

• Data administration and management
• Fraud investigation
• IT systems knowledge
• Governance, risk, and control awareness
• Risk identification
• Risk management
• Risk reporting