Forensics Officer

Position Title: Forensics Officer

Duty Station: Geneva, Switzerland

Classification: Professional Staff, Grade P3

Type of Appointment: Fixed term, one year with possibility of extension

Estimated Start Date: As soon as possible

Closing Date: 05 September 2023

Established in 1951, IOM is a Related Organization of the United Nations, and as the leading UN agency in the field of migration, works closely with governmental, intergovernmental and non-governmental partners. IOM is dedicated to promoting humane and orderly migration for the benefit of all. It does so by providing services and advice to governments and migrants.

IOM is committed to a diverse and inclusive work environment. Read more about diversity and inclusion at IOM at www.iom.int/diversity.

Applications are welcome from first- and second-tier candidates, particularly qualified female candidates as well as applications from the non-represented member countries of IOM. For all IOM vacancies, applications from qualified and eligible first-tier candidates are considered before those of qualified and eligible second-tier candidates in the selection process.

For the purpose of this vacancy, the following are considered first-tier candidates:

1. Internal candidates
2. Candidates from the following non-represented member states:

Antigua and Barbuda; Barbados; Botswana; Cabo Verde; Comoros; Congo (the); Cook Islands; Dominica; Fiji; Grenada; Guinea-Bissau; Holy See; Iceland; Kiribati; Lao People’s Democratic Republic (the); Madagascar; Marshall Islands; Micronesia (Federated States of); Namibia; Nauru; Palau; Saint Kitts and Nevis; Saint Lucia; Seychelles; Solomon Islands; Suriname; The Bahamas; Tonga; Tuvalu; Uzbekistan; Vanuatu

Second tier candidates include:

All external candidates, except candidates from non-represented member states.

Context:

The Office of the Inspector General (OIG), inter alia, undertakes investigations into alleged violations of IOM’s regulations, rules, and relevant administrative instructions, such as but not limited to, fraud, theft, and embezzlement, corruption, sexual exploitation and abuse, abuse of privileges and immunities or of authority, harassment, bullying, whistle-blower retaliation or other acts or omissions in conflict with the general obligations of IOM personnel. OIG is seeking applicants with experience in providing forensics services in support of such administrative investigations.

Under the overall supervision of the Deputy Inspector General or their delegate and direct supervision of the Chief of Investigations, the Forensics Officer will be responsible for the following duties:

Core Functions / Responsibilities:

1. Carry out procedurally and technically sound computer forensics services including recovery and acquisition of evidence from IT equipment, preservation and management of evidence using validated and up-to-date industry best practice during investigation and archiving; identify, collect, recover, analyse, and preserve evidence including by way of (mobile) device data extraction, recovery of corrupt data, electronic mail extraction and database examination.
2. Document the chain of custody and approval process for forensic evidence, as well as evidence acquisition and analysis methods.
3. Implement electronic discovery, computer forensic investigations, and related services for large data sets including Microsoft 365.
4. Perform regular data mining and data analytical procedures using appropriate tools (e.g.lntella) to assist in investigations, including regular data mining to highlight potentially fraudulent activity.
5. Perform complex Open-Source Intelligence (OSINT) extractions and analysis.
6. Review the collected data along with OIG case materials, analyse the data, and produce comprehensive analytical reports: thoroughly document all methods, tools, and activities; check that results are accurate, reliable, repeatable, and verifiable; submit findings in an objective, clear, and concise manner.
7. Maintain knowledge in IT and digital industry standard tools, policies, and practices as they pertain to investigation work in order to document shortcomings or potential for improvement and inform OIG management accordingly.
8. Support and provide information to OIG Investigators on the safest and most reliable way to conduct digital forensic investigations and internet searches, as well as on the availability of digital evidence.
9. Provide tailored digital forensics trainings to OIG personnel, and support of users of technology and systems, such as audio/video conferences, meetings, databases, networks, etc.
10. Conduct testing and maintain OIG forensics systems, tools, and equipment by carrying out regular tasks, such as backing up data, monitoring network and systems, and peripherals, running systems diagnostics, patch management, and system optimization, replenishment of consumables, replacement or upgrade of soft and hardware, etc.
11. Provide substantial inputs in producing relevant Standard Operating Procedures (SOPs) for recovery and handling of electronic evidence, digital forensic analysis, and forensic reports.
12. Effectively plan and undertake office and field-based investigations into allegations of violations of policies, procedures, standards, guidelines, and applicable rules and regulations and manage the workflow of individual cases within the set timeframes.
13. Supervise one or more junior Forensic Officers.
14. Administer user access to systems and databases, and monitor system and application usage.
15. Liaise with the IOM ITC unit, ODG, and other IOM Regional and Country Offices as necessary.
16. Perform such other duties as may be assigned.

Required Qualifications and Experience:

Education

• Master’s degree in Digital Forensics, Computer Information Systems, Criminal and Forensic Sciences or a related field from an accredited academic institution with five years of relevant professional experience; or
• University degree in the above fields with seven years of relevant professional experience.
• Relevant professional certification in the field of Digital Forensics.

Experience

• Five years of professional experience (seven years for bachelor’s degree holders) in digital forensics, investigations, evidence handling, e-discovery processes ad data analysis with an international organization, law enforcement agency, law firm, multinational company, professional services firm, or similar environment.

Skills

• Skills in coordination of multiple investigations and delivery of planned outputs;
• Familiarity with the use of various research methodologies and sources, including electronic sources and databases;
• Ability to coach staff in collection and handling facts and evidence;
• Solid communication skills and setting priorities;
• Demonstrated knowledge of the latest digital forensic techniques (acquisition and analysis)applied to hard drives;
• Demonstrated knowledge electronic devices such as mobile phones, networking and encryption, principles and techniques of computer security investigation, etc.;
• Demonstrated knowledge in the development of automated forensics scripts using PowerShell, Python, or other programming language, including EnScript Programming;
• Demonstrated knowledge in application programming interface (API) analysis for forensics investigations;
• Demonstrated familiarity with United Nations justice system is highly desirable;
• Demonstrated expertise in theories, concepts, and approaches relevant to investigations and practical use of investigation techniques.

Languages

IOM’s official languages are English, French, and Spanish.

For this position, fluency in English is required (oral and written). Working knowledge of French and Spanish is an advantage.

Proficiency of language(s) required will be specifically evaluated during the selection process, which may include written and/or oral assessments.

Notes

Accredited Universities are the ones listed in the UNESCO World Higher Education Database (https://whed.net/home.php).

Required Competencies:

Values – all IOM staff members must abide by and demonstrate these five values:

• Inclusion and respect for diversity: Respects and promotes individual and cultural differences. Encourages diversity and inclusion.
• Integrity and transparency: Maintains high ethical standards and acts in a manner consistent with organizational principles/rules and standards of conduct.
• Professionalism: Demonstrates ability to work in a composed, competent and committed manner and exercises careful judgment in meeting day-to-day challenges.
• Courage: Demonstrates willingness to take a stand on issues of importance.
• Empathy: Shows compassion for others, makes people feel safe, respected and fairly treated.

Core Competencies – behavioural indicators level 2

• Teamwork: Develops and promotes effective collaboration within and across units to achieve shared goals and optimize results.
• Delivering results: Produces and delivers quality results in a service-oriented and timely manner. Is action oriented and committed to achieving agreed outcomes.
• Managing and sharing knowledge: Continuously seeks to learn, share knowledge and innovate.
• Accountability: Takes ownership for achieving the Organization’s priorities and assumes responsibility for own actions and delegated work.
• Communication: Encourages and contributes to clear and open communication. Explains complex matters in an informative, inspiring and motivational way.

Managerial Competencies – behavioural indicators level 2

• Leadership: Provides a clear sense of direction, leads by example and demonstrates the ability to carry out the Organization’s vision. Assists others to realize and develop their leadership and professional potential.
• Empowering others: Creates an enabling environment where staff can contribute their best and develop their potential.
• Building Trust: Promotes shared values and creates an atmosphere of trust and honesty.
• Strategic thinking and vision: Works strategically to realize the Organization’s goals and communicates a clear strategic direction.
• Humility: Leads with humility and shows openness to acknowledging own shortcomings.

IOM’s competency framework can be found at this link.

https://www.iom.int/sites/default/files/about-iom/iom_revised_competency_framework_external.pdf

Competencies will be assessed during a competency-based interview.

Other:

Internationally recruited professional staff are required to be mobile.

Any offer made to the candidate in relation to this vacancy notice is subject to funding confirmation.

This selection process may be used to staff similar positions in various duty stations. Recommended candidates endorsed by the Appointments and Postings Board will remain eligible to be appointed in a similar position for a period of 24 months.

The list of NMS countries above includes all IOM Member States which are non-represented in the Professional Category of staff members.

Appointment will be subject to certification that the candidate is medically fit for appointment, accreditation, any residency or visa requirements, and security clearances. Subject to certain exemptions, vaccination against COVID-19 will in principle be required for individuals hired on or after 15 November 2021. This will be verified as part of the medical clearance process.

Vacancies close at 23:59 local time Geneva, Switzerland on the respective closing date. No late applications will be accepted.