Manager, Digital Forensics & Investigations

GENERAL JOB INFORMATION 
Job Title : Manager, Digital Forensics & Investigations 
Reports to : Head, Group Investigations - GIAMS 
Job Grade : 4A 
Direct Reports N/A 
Location : Home Affiliate

JOB PURPOSE 
The role is responsible for executing comprehensive digital forensic investigations, conducting internal and external cyber incident investigations, and driving the collection, analysis, and dissemination of actionable threat intelligence. The position also ensures regulatory compliance, supports legal proceedings, and collaborates closely with cybersecurity, legal, compliance, and law enforcement stakeholders to protect the organization from advanced persistent threats and digital crimes. 
 

JOB CONTEXT 
Conduct digital forensic investigations, establish root causes, propose recommendations and remedial actions to address reported or identified frauds. In addition, take steps to protect the bank from loss of funds, litigation and reputation damage resulting from fraudulent activities. 
 

KEY RESPONSIBILITIES 
Digital Forensics, Investigations and Threat Intelligence 
▪ Conduct digital forensic investigations related to cyber incidents, fraud, and policy violations. 
▪ Collection, preservation, and analysis of digital evidence in compliance with legal and regulatory standards. 
▪ Coordinate incident response efforts and support post-incident reviews to identify root causes and improve controls. 
▪ Collaborate with cybersecurity, fraud, legal, compliance, and law enforcement teams to support investigations and threat mitigation. 
▪ Develop and maintain investigation protocols, forensic capabilities, and intelligence processes aligned with industry best practices. 
▪ Lead the design and deployment of AI-driven forensic and investigation applications to improve efficiency and automate the entire investigation process from case triaging, evidence analysis to drafting of reports. 
▪ Lead proactive threat hunting activities using internal and external intelligence sources to identify hidden threats before incidents occur. 
▪ Leverage large-scale data analytics to conduct full-population investigations and identify patterns across transactions, users, and systems 
▪ Provide forensic insights to support internal audit, control testing, and regulatory reviews 
▪ Provide expert witness testimony where required in legal and regulatory matters. 
 

General investigations 
▪ Investigate reports on fraud cases received from the whistle blower portal, emails from staff and any other source related to the Bank’s business. 
▪ Conduct investigations into criminal and fraudulent incidents, examine appropriate records and documentation, interview all relevant parties internally and externally and report findings to Management. 
▪ Provide independent reports to assist management with disciplinary processes and assist the legal representative of the bank in Police and Court proceedings. 
▪ Ensure timely completion of investigation reports on fraud incidents. 
▪ Prepare quarterly fraud management reports for Group Executive IAMS to be presented at the ETI Board Meeting. 
▪ Provide forensic insights to support internal audit, control testing, and regulatory reviews 
▪ Recommend control enhancements based on investigation findings and track remediation effectiveness. 
Fraud Risk Management 
▪ Maintain up to date records of fraud investigations to assist in case statistics, monitoring and control. 
▪ Advise management on trends and modus operandi employed by fraudsters and assist to develop counter measures. 
Group Investigations Responsibilities 
▪ Maintain up to date consolidated Case Management System (CMS) for Group Investigations. 
▪ Ensure all clusters report fraud incidents weekly to Group Investigations for consolidation. 
▪ Ensure the CMS is updated and quarterly reports submitted for ETI Board meetings. 
▪ Carry out investigations assigned by the Group Manager, Digital Forensics, Investigations and Threat Intelligence. 
▪ Perform any other duties as assigned by functional head. 
 

KEY SUCCESS FACTORS 
▪ Accurate & timely submission of Investigation reports 
▪ Reduction in operational losses 
▪ Use AI to make the investigation process more efficient 
 

QUALIFICATIONS 
 

Academic Qualifications / Certifications 
• Bachelor’s degree in Digital Forensics, Cybersecurity, Information Security, Computer Science, or a related field. 
• Industry-recognized certifications in digital forensics, cyber investigations, and threat intelligence, such as: 
o GCFA (GIAC Certified Forensic Analyst) 
o GCTI (GIAC Cyber Threat Intelligence) 
o CCFP (Certified Cyber Forensics Professional) 
o CISSP (Certified Information Systems Security Professional) 
o CISM (Certified Information Security Manager) 
o CEH (Certified Ethical Hacker) 
• Strong knowledge of forensic methodologies, incident response frameworks, and threat intelligence models (e.g., MITRE ATT&CK, Diamond Model, STIX/TAXII).  
• Familiarity with banking regulations, data protection laws, and compliance standards (e.g., GDPR, PCI DSS, FFIEC). 
 
Experience 
• 5 years of progressive experience in cybersecurity, with at least 3 years focused on digital forensics and cyber investigations preferably within the banking or financial services sector. 
• Proficiency in the use of AI for efficiency and process optimization; 
➢ Hands-on experience with LLMs 
➢ Experience in building agent-based AI systems 
➢ Strong expertise in prompt engineering and optimization 
• Proven track record of conducting forensic investigations involving cyber incidents, fraud, data breaches, insider threats, or regulatory violations. 
• Hands-on experience with industry-standard forensic and intelligence tools (e.g., EnCase, FTK, Cellebrite, XWays, MISP, Maltego, ThreatConnect). 
• Demonstrated ability to identify emerging risks and deliver strategic insights to senior leadership. 
• Experience working in highly regulated environments, ensuring investigative processes align with legal, regulatory, and internal policy requirements. 
• Strong background in cross-functional collaboration, including coordination with legal, compliance, IT, law enforcement, and third-party threat intelligence providers. 
SKILLS, COMPETENCIES AND BEHAVIOURS 
▪ Demonstrable ability to leverage AI and emerging technologies to enhance investigative effectiveness and efficiency, including developing and deploying solutions that automate evidence analysis, prioritize cases, detect anomalies, review/write reports and support data-driven decision-making. 
▪ Excellent understanding of the role of an Investigator. 
▪ Practical experience in both regular and high-profile investigations 
▪ Excellent interpersonal skills and ability to communicate. 
▪ Excellent organization and time management skills. 
▪ Interviewing and analytical skills. 
▪ Demonstrate flexibility and follow through on commitments.  
▪ High levels of integrity/confidentiality. 
▪ Ability to work independently and collaboratively with minimal supervision. 
▪ Good communication, interpersonal and organizational skills. 
▪ Effective leadership and people management