Associate Cyber Forensics Investigator (P-2)

Organisational Context

IKEMS, headed by an Information Management Coordinator, combines the Office of the Prosecutor’s (OTP) information, knowledge and evidence management operations into one consolidated section. IKEMS aims to maintain a coordinated, flexible and operationally responsive IKEM support capacity throughout the OTP, in order to support the full spectrum of OTP information and evidence operations.

The position of Associate Cyber Forensics Investigator is part of the IKEMS Cyber Unit (CU) which provides expertise for all matters related to digital evidence, including computer forensics, mobile and telecommunications forensics, as well as online investigations.

Duties and Responsibilities

The incumbent will work under the direct supervision of the Head of the Cyber Unit and will perform the following tasks:

• Carry out specialised technical digital forensic examination to acquire digital evidence from computers and other storage devices, including mobile phones or tablet devices;
• Prepare and issue digital and cyber forensic reports;
• Provide testimony in court as required.
• Manage, supervise, monitor, assist or participate in required field activities;
• Advise and assist the Head of Unit on all digital and cyber forensic related matters;
• Contribute to the delivery of training to the first responders/operational investigators;
• Participate in the creation of operational forensic capabilities regarding cyber forensic methodologies, digital forensic equipment, digital forensic networks, cyber forensic support to investigation/prosecution teams in compliance with international quality standards, when required;
• Assist the Head of the Cyber Unit to action digital forensic-related matters, procedures and techniques;
• Perform any other tasks as instructed by the Head of Cyber Unit.

Essential Qualifications

Education:

Advanced university degree in information technology science, preferably in the field of digital, cyber or security forensics, or any other related area is required. A first-level university degree in combination with two additional years of qualifying experience is accepted in lieu of the advanced university degree.

Experience:

A minimum of two years of experience (four years with first level university degree) in cyber forensic investigation and/or examination, preferably with a special focus on complex, large-scale cases and operations, is required.  Relevant experience working in a governmental or inter-governmental agency, scientific police institute, ad hoc international tribunals, international fact finding commissions or as a private expert, is required.

Experience in the execution and/or coordination of vast specialized cyber forensic operations is desirable;

Knowledge, Skills and Abilities:

• Knowledge and technical skills of the newest digital forensic techniques (acquisition and analysis) applied to hard drives, networking and encryption, principles and techniques of cyber security investigation, etc.);
• Excellent ability to organize complex and voluminous sets of records and facts as well as the ability to execute various forensic tasks;
• Excellent ability to communicate effectively with police, forensic, academic or other relevant networks;
• Ability to work under stressful conditions and in volatile environments;
• Ability to work in a non-discriminatory manner, with respect for diversity;
• Professional and personal integrity.

Knowledge of languages:

Proficiency in either of the working languages of the Court, English or French, is required. Working knowledge of the other is desirable. Knowledge of another official language of the Court (Arabic, Chinese, Russian and Spanish) would be considered an asset.