Associate Director, Forensics

Job title / position: Associate Director

Number of positions: 1

Function and Business Unit: Forensic Advisory

Description of the role and purpose of the job:

The individual will be part of Forensic Advisory Services of KPMG in South Africa and will be responsible for managing specific roles and responsibilities in Digital Forensic and Incident Response (DFIR) and Cyber Investigations.

Key responsibilities:

1. Lead cyber investigations and DFIR engagements as per the applicable methodologies.
2. Assist in building pipeline and lead business development activities for DFIR service-line.
3. Coach team members to grow their capabilities for responding to cyber incidents.
4. Responsible for managing quality of deliverables, risk management, and financial management.

Skills and attributes required for the role:

Skills:

1. Experience in responding to cyber security incidents and investigation of cyber breaches including triage, containment, eradication, and broader coordination for the incidents.
2. Knowledge of networks, operating systems (Linux and/or MacOS), databases, static and dynamic malware analysis/reverse engineering, digital forensics, and cloud analytics.
3. Working knowledge of IT, networking, and cloud environment and ability to extract necessary logs and perform triage based on the nature of the incident.
4. Proficiency in identifying the systems and logs to be analyzed considering the nature of the breach.
5. Ability to collaborate, learn, and work with cross-functional teams.
6. Proficiency in documentation, report writing, and documentation.
7. Experience in business development including proposal writing, budgeting, etc.

Personal attributes:

1. Good communication and interpersonal skills.
2. Team leader.
3. Ability to adapt, multi-task, and work on multiple engagements simultaneously.
4. Ability to work under pressure while still delivering high-quality work.
5. Ability to keep track of the big picture while performing in-depth analysis.
6. Social skills, willingness, and experience in being a team player and dealing with people from various backgrounds and areas across the company, but also possess the ability to work independently.

Minimum requirements to apply for the role (including qualifications and experience):

1. A minimum of 15 years of experience in related fields such as Cyber Forensics, Information Security, and Incident Response.
2. Bachelor's degree from an accredited college/university or equivalent experience.
3. Certified Fraud Examiner (CFE).
4. Additional cyber forensic and incident responder certifications such as SANS, CHFI are desired, but not mandatory.