Position Title: Data and Forensics Officer
Duty Station: Geneva, Switzerland
Classification: Professional Staff, Grade P3
Type of Appointment: Fixed term, one year with possibility of extension
Estimated Start Date: As soon as possible
Closing Date: 20 June 2024
Established in 1951, IOM is a Related Organization of the United Nations, and as the leading UN agency in the field of migration, works closely with governmental, intergovernmental and non-governmental partners. IOM is dedicated to promoting humane and orderly migration for the benefit of all. It does so by providing services and advice to governments and migrants.
IOM is committed to a diverse and inclusive work environment. Read more about diversity and inclusion at IOM at www.iom.int/diversity.
Applications are welcome from first- and second-tier candidates, particularly qualified female candidates as well as applications from the non-represented member countries of IOM. For all IOM vacancies, applications from qualified and eligible first-tier candidates are considered before those of qualified and eligible second-tier candidates in the selection process.
For the purpose of this vacancy, the following are considered first-tier candidates:
- Internal candidates
- Candidates from the following non-represented member states:
Antigua and Barbuda; Barbados; Botswana; Cabo Verde; Comoros; Congo (the); Cook Islands; Fiji; Guinea-Bissau; Holy See; Iceland; Kiribati; Lao People’s Democratic Republic (the); Madagascar; Marshall Islands; Micronesia (Federated States of); Namibia; Nauru; Palau; Saint Kitts and Nevis; Samoa; Sao Tome and Principe; Solomon Islands; Suriname; The Bahamas; Tonga; Tuvalu; Uzbekistan; Vanuatu
Second tier candidates include:
All external candidates, except candidates from non-represented member states.
Context:
The Office of Internal Oversight (OIO), inter alia, undertakes investigations into alleged violations of IOM’s regulations, rules, and relevant administrative instructions, such as but not limited to, fraud, theft and embezzlement, corruption, sexual exploitation and abuse, abuse of privileges and immunities or of authority, harassment, bullying, whistle-blower retaliation or other acts or omissions in conflict with the general obligations of IOM personnel. OIO is seeking applicants with experience in providing forensics services in support of such administrative investigations.
Under overall supervision of the Inspector General, or their delegate and direct supervision of the Deputy Inspector General, the Data and Forensics Officer will be responsible for the following duties:
Core Functions / Responsibilities:
- Carry out procedurally and technically sound computer forensics services including recovery and acquisition of evidence from IT equipment, preservation and management of evidence using validated and up-to-date industry best practice during investigation and archiving; identify, collect, recover, analyse, and preserve evidence including by way of (mobile) device data extraction, recovery of corrupt data, electronic mail extraction and database examination.
- Document the chain of custody and approval process for forensic evidence, as well as evidence acquisition and analysis methods.
- Implement electronic discovery, computer forensic investigations, and related services for large data sets including Microsoft 365.
- Perform regular data mining and data analytical procedures using appropriate tools (e.g.lntella) to assist in investigations, including regular data mining to highlight potentially fraudulent activity.
- Perform complex Open-Source Intelligence (OSINT) extractions and analysis.
6.Review the collected data along with OIO case materials, analyse the data and produce comprehensive analytical reports: thoroughly document all methods, tools and activities; check that results are accurate, reliable, repeatable, and verifiable; submit findings in an objective, clear and concise manner.
- Maintain knowledge in IT and digital industry standard tools, policies and practices as they pertain to investigation work in order to document shortcomings or potential for improvement and inform OIO management accordingly.
- Support and provide information to OIO Investigators on the safest and most reliable way to conduct digital forensic investigations and internet searches, as well as on the availability of digital evidence.
- Provide tailored digital forensics trainings to OIO personnel, and support of users of technology and systems, such as audio/video conferences, meetings, databases, networks, etc.
- Conduct testing and maintain OIO forensics systems, tools and equipment by carrying out regular tasks, such as backing up data, monitoring network and systems, and peripherals, running systems diagnostics, patch management and system optimization, replenishment of consumables, replacement or upgrade of soft and hardware, etc.
- Provide substantial inputs in producing relevant Standard Operating Procedures (SOPs) for recovery and handling of electronic evidence, digital forensic analysis, and forensic reports.
- Effectively plan and undertake office and field-based investigations into allegations of violations of policies, procedures, standards, guidelines, and applicable rules and regulations and manage the workflow of individual cases within the set timeframes.
- Supervise one or more junior Forensic Officers.
- Administer user access to systems and databases, monitor system and application usage.
- Liaise with the IOM ITC unit, ODG, and other IOM Regional and Country Offices as necessary.
- Perform such other duties as may be assigned.
Required Qualifications and Experience:
Education
- Master’s degree in Digital Forensics, Computer Information Systems, Criminal and Forensic Sciences or a related field from an accredited academic institution with five years of relevant professional experience; or,
- University degree in the above fields with seven years of relevant professional experience.
- Relevant professional certification in the field of Digital Forensics.
Experience
- Five years of professional experience (seven years for bachelor’s degree holders) in digital forensics, investigations, evidence handling, e-discovery processes ad data analysis with an international organization, law enforcement agency, law firm, multinational company, professional services firm or similar environment.
Skills
- Skills in coordination of multiple investigations and delivery of planned outputs;
- Familiarity with the use of various research methodologies and sources, including electronic sources and databases;
- Ability to coach staff in collection and handling facts and evidence;
- Solid communication skills and setting priorities;
- Demonstrated knowledge of the latest digital forensic techniques (acquisition and analysis)applied to hard drives; electronic devices such as mobile phones, networking and encryption, principles and techniques of computer security investigation, etc.;
- Demonstrated knowledge in the development of automated forensics scripts using Power Shell, Python, or other programming language, including EnScript Programming;
- Demonstrated knowledge in application programming interface (API) analysis for forensics investigations;
- Demonstrated familiarity with United Nations justice system is highly desirable; and,
- Demonstrated expertise in theories, concepts and approaches relevant to investigations and practical use of investigation techniques.
Languages
IOM’s official languages are English, French, and Spanish. All staff members are required to be fluent in one of the three languages.
For this position, fluency in English is required (oral and written). Working knowledge of another official UN language (Arabic, Chinese, French, Russian, and Spanish) is an advantage.
Proficiency of language(s) required will be specifically evaluated during the selection process, which may include written and/or oral assessments.
Notes
Accredited Universities are the ones listed in the UNESCO World Higher Education Database (https://whed.net/home.php).
Required Competencies:
Values – all IOM staff members must abide by and demonstrate these five values:
- Inclusion and respect for diversity: Respects and promotes individual and cultural differences. Encourages diversity and inclusion.
- Integrity and transparency: Maintains high ethical standards and acts in a manner consistent with organizational principles/rules and standards of conduct.
- Professionalism: Demonstrates ability to work in a composed, competent and committed manner and exercises careful judgment in meeting day-to-day challenges.
- Courage: Demonstrates willingness to take a stand on issues of importance.
- Empathy: Shows compassion for others, makes people feel safe, respected and fairly treated.
Core Competencies – behavioural indicators level 3
- Teamwork: Develops and promotes effective collaboration within and across units to achieve shared goals and optimize results.
- Delivering results: Produces and delivers quality results in a service-oriented and timely manner. Is action oriented and committed to achieving agreed outcomes.
- Managing and sharing knowledge: Continuously seeks to learn, share knowledge and innovate.
- Accountability: Takes ownership for achieving the Organization’s priorities and assumes responsibility for own actions and delegated work.
- Communication: Encourages and contributes to clear and open communication. Explains complex matters in an informative, inspiring and motivational way.
Managerial Competencies – behavioural indicators level 3
- Leadership: Provides a clear sense of direction, leads by example and demonstrates the ability to carry out the Organization’s vision. Assists others to realize and develop their leadership and professional potential.
- Empowering others: Creates an enabling environment where staff can contribute their best and develop their potential.
- Building Trust: Promotes shared values and creates an atmosphere of trust and honesty.
- Strategic thinking and vision: Works strategically to realize the Organization’s goals and communicates a clear strategic direction.
- Humility: Leads with humility and shows openness to acknowledging own shortcomings.
IOM’s competency framework can be found at this link.
https://www.iom.int/sites/default/files/about-iom/iom_revised_competency_framework_external.pdf
Competencies will be assessed during a competency-based interview.
Other:
Internationally recruited professional staff are required to be mobile.
Any offer made to the candidate in relation to this vacancy notice is subject to funding confirmation.
This selection process may be used to staff similar positions in various duty stations. Recommended candidates endorsed by the Appointments and Postings Board will remain eligible to be appointed in a similar position for a period of 24 months.
The list of NMS countries above includes all IOM Member States which are non-represented in the Professional Category of staff members.
Appointment will be subject to certification that the candidate is medically fit for appointment, accreditation, any residency or visa requirements, and background verification and security clearances. Subject to certain exemptions, vaccination against COVID-19 will in principle be required for individuals hired on or after 15 November 2021. This will be verified as part of the medical clearance process.
Vacancies close at 23:59 local time Geneva, Switzerland on the respective closing date. No late applications will be accepted.
How to apply
To apply, interested applicants are invited to submit their applications HERE via the IOM e-Recruitment system by 20 June 2024.
IOM only accepts duly completed applications submitted through the IOM e-Recruitment system. The online tool also allows candidates to track the status of their application.
Only shortlisted candidates will be contacted.
For further information please refer to: www.iom.int/recruitment
Posting period:
From 07.06.2024 to 20.06.2024
No Fees:
IOM does not charge a fee at any stage of its recruitment process (application, interview, processing, training or other fee). IOM does not request any information related to bank accounts.
Requisition: VN 2024 337 Data and Forensics Officer (P3) Geneva, Switzerland (58918267) Released
Posting: Posting NC58918268 (58918268) Released