Associate Director, Forensics

Job title / position : Associate Director

Number of positions : 1

Function and Business Unit : Forensic Advisory

Description of the role and purpose of the job :

• The individual will be part of Forensic Advisory Services of KPMG in South Africa and will be responsible for managing specific roles and responsibilities Digital Forensic and Incident Response (DFIR) and Cyber Investigations.

Key responsibilities :

• Lead cyber investigations and DFIR engagements as per the applicable methodologies.
• Assist in building pipeline and lead business development activities for DFIR service-line.
• Coach the team-members to grow their capabilities for responding to cyber incidents.
• Responsible for managing quality of deliverables, risk management and financial management.

Skills and attributes required for the role :

Skills :

• Experience in responding to cyber security incidents and investigation of cyber breaches including triage, containment, eradication and broader coordination for the incidents.
• Knowledge of networks, operating systems (Linux and / or MacOS), databases, static and dynamic malware analysis / reverse engineering; digital forensics and cloud analytics.
• Working knowledge of IT, networking and cloud environment and be able to extract necessary logs and perform triage based on the nature of the incident.
• Proficiency in identifying the systems and logs to be analysed considering the nature of the breach.
• Ability to collaborate, learn and work with cross functional teams.
• Proficiency in documentation, report writing and documentation.
• Experience in business development including proposal writing, budgeting etc.

Personal attributes :

• Good communication and interpersonal skills.
• Team leader.
• Ability to adapt, multi-task and work on multiple engagement simultaneously.
• Ability to work under pressure while still delivering high quality work.
• Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
• Social skills, willingness and experience in being a team player and dealing with people from various backgrounds and areas across the company, but also possess the ability to work independently.

Minimum requirements to apply for the role (including qualifications and experience) :

• A minimum of 15 years of experience in related fields such as Cyber Forensics, Information Security and Incident Response.
• Bachelor's degree from an accredited college / university or equivalent experience.
• Additional cyber forensic and incident responder certifications such as SANS, CHFI are desired, but not mandatory.