The Digital Forensics Investigation Officer is responsible for working collaboratively with internal and external stakeholders, the incumbents undertake investigations of alleged misconduct or violations of ICRC internal policies and procedures.

Accountabilities & Functional responsibilities

• Under the direct supervision of the Regional Investigation Manager or Designate, the incumbent is responsible for the following duties:
• Conduct digital forensic investigations to retrieve, analyse, and secure digital evidence from various devices and storage systems;
• Utilize forensic software and tools to examine data and uncover relevant information for ongoing investigations;
• Support and collaborate with investigation teams to maintain the chain of custody and ensure the integrity of digital evidence;
• Document all findings and prepare reports that will be used in investigations;
• Prioritize follow-up on cases based on instructions from Regional Investigation Manager or Designate.
• Determine whether matters involve potential fraud, corruption or other illegal or criminal conduct warranting referral to national authorities;
• As instructed by the Regional Investigation Manager or Designate, prepare cases for submission to the internal justice system and/or referral to relevant national jurisdictions and support in the triage process;
• Performs other preventive compliance activities as required, including trainings;
• Performs other duties to support the operational function of the Investigation Unit as determined by the Head of Investigations or Designate.

What we will look for in your profile 

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field;
• Minimum 5 – 7 years’ professional experience of investigations and investigatory procedures;
• Proven experience in digital forensics, cybersecurity, or a similar role.
• Proficiency with forensic software and tools (e.g., EnCase, FTK, X-Ways, Cellebrite, Intella);
• Certification in digital forensics (e.g., Certified Cyber Forensics Professional, GIAC Certified Forensic Analyst) is an asset.
• Understanding of legal procedures and regulations related to digital evidence handling;
• Documented expertise in investigation techniques, particularly where conduct also may have criminal implications that could result in prosecution before local courts;
• Documented knowledge of legal, procedural, and evidentiary standards of International Organizations;
• Willing to travel and conduct investigations in remote, hardship and physically challenging environments;