The role is responsible to prevent, detect and suppress technological crime against the assets, staff and customers of the Scotiabank Group and Affiliates by investigating highly complex cases involving organized crime. Take proactive action to identify and investigate emerging forms of electronic fraud and provide expert digital forensic services in support of criminal investigations often working with a global stakeholders and senior management.
1. Lead Technical Investigations:
- Lead high complexity investigations globally as well as oversee the cases of the team relating to known or suspected technological crime against the Scotiabank Group and affiliates on a worldwide basis and gather sufficient evidence to assist in determining criminal and civil remedies against the perpetrators. This is inclusive of technical/data security breaches, business conduct violations, employee defalcations, customer/non customer fraud/theft, relating to digitalbanking, investments, loans and bank card products as well as utilizing electronic means to trace and locate the proceeds of criminal activities as well as assist in the recovery of assets.
- Take immediate action in conjunction with line management, Information Security & Control, Intelligence, Fraud Management, as well as external partners including law enforcement, banks, and investigative bodies on a worldwide basis to investigate and preventfinancial loss and reputational risk to the Bank in alignment with the department’s mandate
- Assist in major case management investigations and critical incidents being led by Corporate SecurityInvestigation Services.
- Prepare escalations reports and recommendations to senior management/key stakeholders pertaining to investigations completed by the team. Ability to articulate technical findings to target audience is essential.
2. Execute Digital Fraud Investigations:
- Prevent, detect and investigate various forms of electronic fraud such as targeted hacks and crimeware against the Bank and its customers internationally.
- Oversee and manage digital fraud investigations conducted by the team as it relates to Phishing, malware and account takeover cases and identify trends and recommendations to mitigate cyber fraud risk with key stakeholders and line management. This includes the investigation of anomalous or erroneous transactions and information, as well as identifying source and intent and assessing threat to Bank systems and financial integrity
- Responds to cybercrime against the Bank globally on an immediate basis, and may be expected to travel on short notice. Must be able to multi-task and set priorities quickly to determine the order in which situations need to be handled autonomously.
3. Manage Forensic Processes and Procedures:
- Secure, protect, evaluate and correlate evidence in a forensically sound manner, sufficient to support criminal charges and support collaboration with legal, the police and other authorities. This includes ensuring the allegations are well founded and provable, with a high expectation of a successful outcome to avoid potential risk to civil liability. This entails the preparation of supporting internal/external communications, including court briefs as necessary and the development of sound operational action plans with attention to detail documentation and preservation of evidence.
- Develop and manage standard operating procedures to govern forensic practices and procedures concerning the extraction and proper handling of various forms of potential digital evidence, conduct proper analysis and safeguard findings and conclusions in a manner suitable for criminal or civil court proceedings.
- Testify and represent the Scotiabank Group and affiliates as an expert witness in courts, as required.
4. Oversee Operations and Project Collaboration:
- Utilize programming languages or scrips to enable intricate searches and data analysis as well as automate various forensics processing tasks to detect and investigate wrongdoing and threat actors
- Assist management with process reengineering to consistently improve investigative methodologies and processes including technology and tools.
- Work with management and various departments on major project such as system and or application development and implementation to assist with investigations.
- Must be able to work in a fast past environment, but able to multitask and managing changing priorities is a key success criteria for the role.
5. Develop Intelligence and Security Assessments:
- Assist in the preparation of digital fraud investigation metrics and KRIs for operational risk and various stakeholders on all known or suspected internal/external crime against the Scotiabank Group and affiliates
- Maintain current awareness of evolving trends in the financial industry, relative to technological crime, investigative techniques and new enhanced delivery systems within the Scotiabank Group and other FIs.
- Provides counsel and guidance from a cyber fraud perspective on risk assessments of delivery systems or new payment initiatives and make recommendations on security enhancements in an effort to reduce cyber crime exposure and protect the Bank’s assets, staff and customers of the Scotiabank Group
- Coaches and oversees the investigations of 5 staff members and provides guidance and direction to team members when required on an ongoing basis both during and off business hours. Therefore, must be to manage highly skilled technical staff to coordinate and obtain accurate investigative results through effective communication/action plans to suppress or prove technological crimes against the Scotiabank Group and affiliates
- Exercises sound judgment, common sense to conduct medium to high complexity investigations in accordance with the Bank’s best practices and procedures and is guided by experience as well as the Canadian Criminal Code and related Federal & Provincial statutes
- Discharges responsibilities with minimal supervision and seeks direction from the Director when conducting complex computer crime investigations or confronted with unusual circumstances
- Refers criminal activity to the police for appropriate action where the Bank has sustained a loss with the exception of defalcations and suspected money-laundering transactions in which case, makes recommendations to the Director Investigation Services to follow through approval process
- Possess knowledge of the Bank’s hardware and software systems as well as policies and procedures to effectively conduct technical investigations and identify potential leads
- Independently determines if all gathered evidence is sufficient to support criminal and civil action and ensures full disclosure as required by law in civil and criminal processes. Makes decisions on the action steps involved in an investigation, ensuring that the Bank is not compromised or exposed to potential civil liability or reputational risk.
Education / Experience
- Post-Secondary University degree in Information Security, Information Technology, or Computer Science/Engineering is required or
- Minimum of 8-10 years’ experience in Digital Forensics, Security or Information Technology field is required.
- Information Security related certifications are preferred
- Working knowledge of the Criminal Code of Canada, the Canada Evidence Act and provincial interpretations relating to computer crime
Requisition ID: 23240