Director - Digital Forensics - Sony Pictures Entertainment - Culver City

Job description
The Director of Digital Forensics will provide technical oversight and expertise to support the company’s efforts and programs in the area of computer/digital forensics, network intrusion/incident response, electronic discovery (eDiscovery), and critical data recovery.
The primary responsibility of the employee will be to provide highly technical support for a myriad of investigations (with specific focus on digital and high tech components, and incident response). The employee will also serve as a primary backup for eDiscovery litigation requests from SPE Legal as well as backup support for conducting investigations.
eDiscovery is the process by which information in electronic format is exchanged as a part of the discovery process during litigation matters. SPE’s eDiscovery program focuses on the collection, processing, exchange, production and archiving of data for various SPE legal teams.
Investigations involve (but are not limited to): crimes against the corporation’s tangible and intangible assets; it’s employees in the course of their duties; threats against persons relative to their work with SPE; piracy of intellectual property; counterfeiting of merchandise; sabotage; misconduct; fraud; other financial crimes, conflict of interest; misappropriation/impropriety; intellectual property loss; serious injury or death.
Core Responsibilities:
• 30% Assist with various types of investigations from a technical perspective. Must be able to work independently and utilize critical thinking skills to solve problems, determine next steps, develop solutions, and bring to a successful conclusion. This position will require particular knowledge and experience in Network Forensics and Incident response to partner with Information Security when needed for investigations.
• 20% Manage/supervise the Planning, Collection, Filtering, Culling, and Validation of identified data:
o Ensure quality control of the eDiscovery chain of custody, staging, processing and production process.
o Track and monitor all project activity and update project plans as required.
o Install, configure and trouble-shoot specialized computer hardware, forensic and eDiscovery software and LAN issues.
o Perform technical data management activities, such as merging data into database applications, merging images into image viewing applications and converting data into various platforms.
o Use various enterprise level data processing tools to ready data for legal review.
• 20% Independently and with minimal supervision (using highly specialized training and experience in computer/digital forensics), conduct interviews, identify data sources, provide counsel and guidance, gather data, prepare reports, coordinate with other departments, and coordinate computer/digital forensics efforts globally among regional labs.
o Required to independently identify, utilize and manage external consulting resources as needed to assist with eDiscovery and investigations obligations/commitments.
o Provide all project documentation, archive all appropriate records and monitor compliance requirements to ensure consistent, high quality work.
o Provide technical support to Investigators and eDiscovery attorneys.
o Is required to stay current on industry eDiscovery litigation and court decisions as well as statutory requirements and changes.
10% Manage and improve lab tracking databases to ensure proper evidence management
5% Assess and perform data recovery from failing hardware for business-critical data
5% lnternal/External liaison (build relationships with counterparts, participate in associations such as HTCIA, Women of eDiscovery, LegalTech) both domestically and internationally. Establishing of close liaison with legal, HR and risk management
5% Learn SPE’s business to explore ways of improving efficiencies from: eDiscovery requests; improve lab processes/procedures; stay updated on legal requirements/changes in regards to eDiscovery requirements and compliance.
5% Maintain/improve SPE’s protocols for evidence control, processing, and handling to ensure authenticity and validity for legal proceedings.
Desired Skills and Experience
Certification/Licenses: EnCE, CCE, CFCE, CISSP or equivalent
- Experience with Legal document review technologies required.
- Expertise with enterprise level tools and Network Forensics.
- Critical data recovery/hard drive repair certification a strong plus.
- Certified Fraud Examiner desirable.
Experience: This position requires experience in conducting and/or leading digital investigations and eDiscovery projects of a complex and sensitive nature. A combination of computer technical and project management experience is ideal. International experience is also preferred. Previous experience in providing witness testimony both at trial and in depositions is preferred.
The incumbent may be involved in eDiscovery requests involving considerable cost impact. The ability to comprehend potential for liability and sensitivity is critical.
Knowledge
• Demonstrated knowledge/experience of evidence handling, working within a forensic lab environment, and legal process
• Working knowledge of Windows, Apple, UNIX, and Linux operating system
• A thorough understanding of eDiscovery processes/procedures, rules of evidence, civil procedure (in particular – The Federal Rules of Civil Procedure as it relates to eDiscovery), interviewing techniques, and report writing is required.
• Knowledge of Information Security best practices with special attention to Data Privacy, both domestically and internationally.
• On-going need to stay abreast of rapidly changing legislation (Domestic and International relative to privacy, disclosure, discovery, data retention, etc) that will require external training and specialized knowledge in an emerging technical field.
• Sound knowledge and experience in Incident Response is required.
Skills
• Highly specialized training and experience in Digital Forensics requires continued certification and an in-depth knowledge of computer sciences.
• Requires good oral and written skillsets (reports) and must be able to independently interface and work with internal and external legal staff, senior company executives, and line employees.
• Forensic certification is required (EnCE preferred), but company will assist with getting certification if adequate computer technical experience is present. The Ideal candidate will have experience and training in Incident Response, memory analysis, and/or malware reverse engineering
• Requires the employee to understand and support the need for extreme confidentiality. He/She will have all levels of access and will be exposed to and handle data that is highly sensitive. These requirements dictate that the employee be someone of not only strong technical skills, but with excellent organizational and critical thinking skill-sets that allows them to operate independent of management as needed.
Ability
• Capable of working in both a tactical and a strategic way. Must possess the confidence and ability to interact at all levels of the organization both in written and oral presentation.
• Must be able to provide testimony in legal matters.
• Position requires on-call availability.
• Travel is necessary.
• Physical requirements include being able to access all company facilities worldwide.
Preferred Additional Skills:
• Master’s Degree
• Experience in a law enforcement environment
• Interview/Interrogation training/skills

Enter your email address:

Refer This Job To Your Friends And Help Them To Find Jobs!