Senior Investigator

Senior Investigator contributes to the overall success of the Digital Forensic Services / Corporate Security in Canada ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are in compliance with governing regulations, internal policies, and procedures.

Is this role right for you? In this role you will:

Champion a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems, and knowledge.

Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions. Actively pursue effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk. Develop and maintain reliable information sources and liaise with law enforcement, regulators, industry partners, and other corporate security personnel for the purposes of gathering intelligence and execution of any remedial actions to contribute to the department’s mandate. Champion a high-performance environment and contributes to an inclusive work environment.

Technical Investigations:

Investigate and manage known or suspected cyber-enabled crime internal and externally against the Scotiabank Group and its affiliates, ranging from medium to high complexity and gather sufficient evidence to assist in determining criminal and civil remedies against the perpetrators. Contribute to Cyber Incidents Response Team (CIRT) investigations, High-priority Investigations (HPIs), and major case management investigations and critical incident being led by Corporate Security Investigation Services teams, which may require travel globally. Contribute to the use of data analytics and various search strategies\techniques to enable analysis of all forms of electronic media to detect and investigate digital artifacts from criminal behaviors.

Digital Fraud Investigations:

Conduct digital fraud investigations to identify trends, including where possible, identifying the perpetrators, as well as their tactics, techniques, and procedures (TTP) and making recommendations on fraud risk mitigation strategies to key stakeholders and line management. This includes investigating various forms of cyber-enabled fraud such as phishing, malware, social engineering, account takeover, targeted attacks, and crimeware against the Bank and its customers internationally. Maintain current awareness of evolving trends in the financial industry, relative to cyber-enabled crime, investigative techniques, and new and enhanced delivery systems within the Scotiabank Group and other financial institutions (FIs). Assist in the development and presentation of digital fraud investigation metrics, statistics, and trends to management, and/or other stakeholders. This includes providing recommendations on enhancing the state of the Bank’s fraud detection and response capabilities as well as systems security and controls.

Forensic Examinations:

Conduct medium to high complexity digital forensic investigations on electronic devices, networks, and cloud-based services to collect, preserve, analyze, and interpret digital evidence relating to various forms of misconduct investigations. This includes ensuring the allegations are well founded and provable, with a high expectation of a successful outcome to avoid potential risk to civil liability. This entails the development and execution of forensically sound operational action plans with attention to detail documentation and preservation of evidence. Prepare high quality investigative forensic reports for senior management, key stakeholders, or legal proceedings. This includes articulating complex and technical information findings clearly and concisely to non-technical stakeholders, including senior executives, business unit heads, legal teams, and law enforcement. Testify and represent the Scotiabank Group and affiliates as an expert witness in criminal and civil proceedings, as required. Contribute to the management of the Digital Forensic Lab, ensuring proper handling of digital evidence throughout the evidence life cycle, to include the collection, analysis, preservation, and destruction, in compliance with bank standards, legal and regulatory requirements. This includes developing, implementing, and maintaining forensic standards, procedures, practices, and proper chain of custody documentation to ensure the integrity and continuity of digital evidence held within the department in a manner suitable for criminal or civil court proceedings.

Technical Consultation and Project Collaboration:

Participate as a consultative SME in new product initiatives across the Bank to advise on the adequacy of security controls and make recommendations on security enhancements to reduce cybercrime exposure and protect the Bank’s assets, staff, and customers of the Scotiabank Group. Contribute to the development and delivery of educational presentations on cyber-enabled crime trends as well as training material and knowledge-sharing sessions to global CS digital forensic investigators, other Corporate Security staff, branch, and Bank employees. Work with management and various departments on major project such as system and or application development and implementation to assist with investigations. Contribute to the department’s efforts to continually enhance its investigative methodologies, processes, technology, and tools, ensuring they remain effective, efficient, and aligned with the department’s strategic goals and objectives.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

Education & Designations:

Post-Secondary University degree in Computer Science/Engineering or Information Technology required.

Work Experience:

Minimum of 3-5 years in Digital Forensic, Cyber Security or Information Technology field. Working knowledge of the Criminal Code of Canada, the Canada Evidence Act and provincial interpretations relating to computer crime.

Some more information you might want to know:

Self-motivated, exercises sound judgment to conduct medium to high complexity investigations in accordance with the Bank’s best practices and procedures and is guided by experience as well as the Canadian Criminal Code and related statutes. Works directly with various internal and external stakeholders and, must possess excellent oral and written communication skills. Require expert forensic knowledge for handling and analyzing digital evidence including the use new or existing highly sophisticated tools / technology to capture, preserve and analyze digital evidence. Must be adept in technical skills to work with databases and analytical programs. Must be able to quickly embrace modern technologies and become familiar with emerging crime trends to ensure the establishment of adequate IT security measures/controls when assessing the Bank’s new delivery channels. Responds to cyber-enabled fraud against the Bank globally on an immediate basis and may be expected to travel on short notice. Must be able to multi-task and set priorities quickly to determine the order in which situations need to be managed. Possess working knowledge of the mechanics of the Bank’s financial banking systems/policies and procedures and money laundering techniques, together with fraud, theft, and related criminal activity to assist in technical investigations and identify potential investigative leads. Discharges responsibilities with minimal supervision and seeks direction from the Senior Manager when conducting complex computer crime investigations or confronted with unusual circumstances. Upon completion of an investigation, determines if all evidence to support a criminal or civil action is sufficient to warrant referral to the authorities.

---