Senior Computer Forensic Analyst, Insider Protect - Forensic/eDiscovery

Work Location:
Toronto, Ontario, Canada

Hours:
37.5

Line of Business:
Technology Solutions

Pay Details:
$76,800 - $115,200 CAD

This role is eligible for a discretionary variable compensation award that considers business and individual performance.

Job Description:

Senior Computer Forensic Analyst, Insider Protect-Forensic/eDiscovery

The Senior Computer Forensic Analyst supports the protection of organizational assets and human resources across all TD enterprise-wide locations by providing advice, planning, and support for Cyber Threat Management leadership.

Responsibilities:

• Conduct complex and sensitive investigations across North America
• Apply sound methodologies to collect, preserve, and analyze digital evidence
• Stay up to date on the emerging technology threat landscape
• Work with Cyber Threat Management, Global Security & Investigations, Legal, Human Resources, Privacy, Risk, and external law enforcement to forensically collect and analyze digital evidence
• Research, evaluate, develop, test, and apply new methodologies for analyzing digital evidence
• Support and develop procedures and standards, delivering advice, direction, and education to TD management and staff

Key Accountabilities:

• Lead digital evidence/cybercrime investigations
• Collect evidence from various devices capable of storing electronic data
• Maintain a digital forensic lab environment ensuring all hardware and software are verified and validated as forensically sound
• Focus on operational efficiency to leverage tools and processes that reduce redundancy and improve capacity
• Respond to internal business units to investigate sensitive or urgent matters
• Prepare written professional reports
• Testify and present evidence, as required

Required Competencies:

• Understanding of digital forensic principles, methodologies, and techniques; experience using digital forensic tools (i.e., EnCase, Axiom, e-Discovery tools, Cellebrite, Intella, Crowdstrike, Splunk)
• Knowledge of Data Loss Prevention tools and conducting DLP related investigations
• Excellent written and verbal communication, presentation, organization, leadership, and planning skills
• Ability to interpret digital evidence matters for non-technical stakeholders
• Understanding of operating systems (Windows, Linux, OSX)
• Background in operational information security disciplines

Education and Experience:

• Professional designation/certification (EnCE, CISSP, CCFP, CISM, GIAC) is an asset
• University degree or college diploma in Computer Science or a related field
• Minimum of 5 years of relevant experience conducting computer forensic investigations.

Inclusiveness:
At TD, we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected, and supported. We are dedicated to building a workforce that reflects the diversity of our customers and communities.

Our Total Rewards Package:
Our Total Rewards package reflects the investments we make in our colleagues to help them achieve their financial, physical, and mental well-being goals. Total Rewards at TD includes base salary, variable compensation, and several other key plans such as health benefits, savings and retirement programs, and career development opportunities.

Interview Process:
We'll reach out to candidates of interest to schedule an interview and communicate outcomes to all applicants by email or phone call.