Description

Bank of Uganda is hiring a Cybercrime & Forensics Officer to ensure security and safety of Bank premises and operations through cyber incident and forensics investigation of incidents on Bank premises and operations.

DEPARTMENT: SECURITY SERVICES DEPARTMENT

JOB REF: SEC4.05

JOB TITLE: CYBER-CRIME & FORENSICS OFFICER

RANK: SB0II

SUPERVISOR: TEAM LEADER – FORENSICS LABORATORY

SUPERVISES: NONE

DUTIES AND RESPONSIBILITIES

• Carry out cyber and forensic investigations and submit investigation reports in line with established procedures, including recording and analyzing statements from witnesses, persons of interest, and suspects.
• Collect, preserve, and analyze digital evidence using approved forensic and cyber tools, while ensuring the safe custody of all evidence and adherence to chain of custody procedures.
• Assess cyber threats affecting the financial services industry and provide timely information and recommendations on emerging risks, cyber fraud indicators, and protective measures for the Bank.
• Provide forensic and cyber intelligence upon request, support investigative decisions and advise management on mitigation measures for identified threats.
• Contribute to the development and regular review of digital forensic policies, procedures, and guidelines, and recommend improvements in investigation processes, systems, and evidence management.
• Perform forensic analysis on IT systems by collecting, preserving, and analyzing digital evidence, including recovering data from damaged devices and extracting critical information, in accordance with the Banks approved tools, guidelines, and procedures.
• Ensure physical security during cyber incident investigations. including controlled access to sensitive environments and proper handling of forensic equipment.
• Conduct staff awareness and sensitization sessions on cybercrime and forensic investigation practices to promote organizational readiness and secure use of ICT resources.
• Develop annual work activities and attendant budgets for effective investigation operations.
• Perform any other duty assigned from time to time

EXPECTED OUTPUTS

• Semi-annual and case Investigation Reports
• Bank, National and international digital crime trend reports
• Chain of Custody records
• Updated Evidence inventory

A. MINIMUM QUALIFICATIONS

• A first-class or second-class (upper) degree in Computer Science, Information Technology, Cyber Security, Digital Forensics, Computer Engineering, Electrical Engineering from a recognized university.
• At least one recognized industry certifications in digital forensics or cyber incident investigations from any of the following bodies: GIAC Network Forensic Analyst (GNA),GIAC Certified Incident Handler (GCH)GIAC Certified Forensic Examiner (GCFA)GIAC Certified Forensic Analyst (GCFA).GIAC Certified Incident Handler (GCIH),GIAC Cyber Incident Leader (GCIL), EC Council Certified Incident Handler (ECIH).EC Council Certified Ethical Hacker (CEH),Offsec Offensive Security Certified Professional (OSCP)PECB Certified Incident Responder (CIR/ CIR),EC Council Computer Hacking Forensic Investigator (CHFI),Certified Forensic Security Responder (CFSR), EnCase Certified Examiner (EnCE) certification, EnCase Certified eDiscovery Practitioner (EnCEP) certification, Oxygen Forensic Detective, AccessData Certified Examiner (ACE),Magnet Certified Forensic Examiner (MCFE) certification,

B. EXPERIENCE

• Minimum of five (5) years relevant working experience in digital forensics and or cyber incident investigations.
• Working experience in a Security Agency with in-depth understanding of the cyber forensics investigations process is added advantage.

C. AGE

Applicants must be between 30.0 to 40.0 years of age by close of the advertisement.

D. COMPETENCIES

i) Technical skills

• Digital Forensics science and technology knowledge
• Digital data recovery
• Ethical hacking
• Cyber incident investigation
• Interviewing and interrogation techniques
• Investigation Report writing
• Practical understanding of digital forensic legal regime and the criminal justice system Investigation Report writing

iv) Behavioral skills

• Time Management
• Problem Solving
• Communication
• Good Listening
• Self-motivation
• Positive Attitude
• Emotional Intelligence
• Conceptual thinking
• Quick decision making
• Analytical & Critical thinking
• Inductive and deductive Reasoning

11. PHYSICAL DEMANDS OF THE JOB

• Work in a lab environment

12. WORKING CONDITIONS

• Work in tense and charged environment during investigations
• Work in a cold environment for extended periods of time

Salary and benefits for the position are generous and attractive.

• Carry out cyber and forensic investigations and submit investigation reports in line with established procedures, including recording and analyzing statements from witnesses, persons of interest, and suspects.
• Collect, preserve, and analyze digital evidence using approved forensic and cyber tools, while ensuring the safe custody of all evidence and adherence to chain of custody procedures.
• Assess cyber threats affecting the financial services industry and provide timely information and recommendations on emerging risks, cyber fraud indicators, and protective measures for the Bank.
• Provide forensic and cyber intelligence upon request, support investigative decisions and advise management on mitigation measures for identified threats.
• Contribute to the development and regular review of digital forensic policies, procedures, and guidelines, and recommend improvements in investigation processes, systems, and evidence management.
• Perform forensic analysis on IT systems by collecting, preserving, and analyzing digital evidence, including recovering data from damaged devices and extracting critical information, in accordance with the Banks approved tools, guidelines, and procedures.
• Ensure physical security during cyber incident investigations. including controlled access to sensitive environments and proper handling of forensic equipment.
• Conduct staff awareness and sensitization sessions on cybercrime and forensic investigation practices to promote organizational readiness and secure use of ICT resources.
• Develop annual work activities and attendant budgets for effective investigation operations.
• Perform any other duty assigned from time to time

• Digital Forensics science and technology knowledge
• Digital data recovery
• Ethical hacking
• Cyber incident investigation
• Interviewing and interrogation techniques
• Investigation Report writing
• Practical understanding of digital forensic legal regime and the criminal justice system Investigation Report writing
• Time Management
• Problem Solving
• Communication
• Good Listening
• Self-motivation
• Positive Attitude
• Emotional Intelligence
• Conceptual thinking
• Quick decision making
• Analytical & Critical thinking
• Inductive and deductive Reasoning

• A first-class or second-class (upper) degree in Computer Science, Information Technology, Cyber Security, Digital Forensics, Computer Engineering, Electrical Engineering from a recognized university.
• At least one recognized industry certifications in digital forensics or cyber incident investigations from any of the following bodies: GIAC Network Forensic Analyst (GNA),GIAC Certified Incident Handler (GCH)GIAC Certified Forensic Examiner (GCFA)GIAC Certified Forensic Analyst (GCFA).GIAC Certified Incident Handler (GCIH),GIAC Cyber Incident Leader (GCIL), EC Council Certified Incident Handler (ECIH).EC Council Certified Ethical Hacker (CEH),Offsec Offensive Security Certified Professional (OSCP)PECB Certified Incident Responder (CIR/ CIR),EC Council Computer Hacking Forensic Investigator (CHFI),Certified Forensic Security Responder (CFSR), EnCase Certified Examiner (EnCE) certification, EnCase Certified eDiscovery Practitioner (EnCEP) certification, Oxygen Forensic Detective, AccessData Certified Examiner (ACE),Magnet Certified Forensic Examiner (MCFE) certification,