IT Investigator job description

MAIN DUTIES
1.
- Assist in the investigation of IT aided criminal activity and / or incidents amounting to misconduct or gross misconduct including: theft, fraud, computer abuse, malicious communications (including bomb warnings), harassment etc. and where required, to act as the lead investigator, in order to identifying those responsible and prevent further such incidents
- Provide an effective IT forensic investigation service by conducting examinations of computers and the media generated by computers to develop evidence as the supporting investigator in this specialist area of forensic computer science
- You will be responsible for effective management and performance of forensic examinations of computer systems including other associated digital media and devices in particular those involving high technology internet cases
- Conduct detailed forensic examination of Disk Images and other hardware peripherals to enable information retrieval, breaking passwords, finding hidden or otherwise "invisible" information on the media to extract evidence of misuse / criminal activity
- Use experience and knowledge of a wide variety of advanced computer technologies and theories to conduct analysis of evidential sources
- In data recovery cases, determine the most appropriate method of protecting original evidence and recovery of deleted, erased, hidden and encrypted data
- Engage in proactive and reactive use of investigative tools for the identification of offenders and prevention of crime including the use of covert surveillance techniques

- Prepare case files, expert reports and evidence for use in court or as part of an internal disciplinary hearing or other dispute resolution forums, whilst also ensuring effective management of exhibits, including electronically recorded material in connection with investigations.
- Provide written witness statements to the police, or discipline authority detailing involvement in investigations as appropriate; attend court, disciplinary hearings or tribunals to give evidence as required.
- Ensure effective management of cases through appropriate stages
-Ensure adherence to proper safety precautions, identify risk, develop control measures and act accordingly to prevent accidents. You are responsible for the safety of self, others, materials, and equipment. Use safety equipment as required.
- Accurately record and report incidents .
- Give advice & reassurance to victims and witnesses as appropriate.
- Prioritise case load in accordance with departmental objectives.
- Gather and disseminate information & intelligence with a view to turning it into actionable information
- Perform other related duties as required by management to meet the needs of the organisation.

2. Provide advice to managers and staff from all departments and outside organisations on:-

- Matters regarding criminal and civil law in particular as it relates to Information Technology;
- Cases where a member of staff or contractor is suspected of criminal activities;
- Participate in management and/or staff meetings as required to offer advice as appropriate.
- Assisting & advising managers and editors in connection with the exclusion of persons who have misbehaved in BBC premises.

3. Provide an effective liaison with internal departments and external agencies:-

- Carry out joint investigations with Internal Audit and HR
- Liaise closely with Litigation
- Liaise with the appropriate Police forces, other law enforcement agencies and other external organisations in dealing with reported incidents of crime and related incidents involving staff and contractors and assets
- Liaise, as required, with Corporate Security in respect of the security of high profile visitors and staff; in providing a focal point in the BBC for liaison with the emergency services in the event of civil disturbance, terrorist activity or other serious incidents; and in respect of crime prevention initiatives and related control measures
- Responsible for the examination, control and disclosure of material subject to the Data Protection Act i.e. IT generated data etc.