Job summary
The NHS Counter Fraud Authority (NHSCFA) is the national body responsible for all matters relating to the prevention, detection and investigation of economic crime across the NHS. Further information about our work and annual plan for delivering this is available on our website.
The Digital Forensics Unit (DFU) Manager is the NHSCFA subject matter expert in the acquisition, processing and analysis of digital media in accordance with the ACPO Good Practice Guide for Digital Evidence, the ISO17025 standard and the Forensic Science Regulator (FSR) Code of Practice.
The post holder will ensure the successful delivery of Digital Forensics solutions to meet the requirements of the NHSCFA. They will ensure that the NHSCFA maintains and develops robust processes and procedures that comply with ISO17025 standards and the FSR Code of Practice to ensure the provision of efficient and timely Digital Forensics services in line with the NHSCFA objectives and business plans.
Potential applicants can contact Richard Rippin at richard.rippin@nhscfa.gov.uk for an informal chat if you have any questions regarding the role.
We reserve the right to close this vacancy before the advertised closing date should we receive a significant number of applications.
Interviews will be held in London and Newcastle w/c 19th August 2024
Main duties of the job
The post holder will provide assurance to the National Operations Manager and Head of Operations and Engagement for the development and delivery of Digital Forensics services to the NHSCFA National Investigation Service (NIS), CFS Wales, CFS Scotland, DHSC AFU, NHS England and LCFS' and any other contracted external customers.
This role requires Security Clearance.
About us
We have Digital Forensic laboratories based in London and Newcastle. Please note this is an office-based role, however flexible working requests will be considered on a per case basis. In addition to the advertised salary working in the London area will attract High-Cost Area Supplement where appropriate. The NHSCFA values and respects the diversity of its employees and aims to recruit a workforce which reflects our diverse communities. We welcome applications irrespective of people's age, disability, gender, race or ethnicity, religion or belief, sexual orientation, or other personal circumstances. We have policies and procedures in place to ensure that all applicants are treated fairly and consistently at every stage of the recruitment process, including an invitation to the first stage of the selection process and consideration of reasonable adjustments for people who have a disability. If you are applying to undertake this role on a secondment basis you should have agreement to being released from your current role in principle, prior to submitting an application form. When you apply for this role, you will be redirected to our recruitment system TRAC.
The NHSCFA does not hold a sponsor licence in respect of skilled worker visas and so is unable to employ candidates requiring sponsorship.
Job description
Job responsibilities
Responsibility for the delivery of forensic acquisitions, processing and analysis (either on site or in the lab) of digital media for use in investigations by the NHSCFA and external stakeholders.
Being responsible for ensuring that acquisition, processing and analysis activities are compliant with relevant evidential and professional standards and are undertaken using techniques and procedures that maintain the integrity of digital data.
Producing statements and exhibits to a standard suitable for use in Crown Court for criminal or civil proceedings.
Testifying in Crown Court and civil proceedings as required, on results of seizure, handling of evidence and results of analysis conducted.
Ensuring that all digital material is properly collected, preserved, transported, and stored.
Supporting onsite investigative activity, either in person or remotely as and when required. Flexibility is required as this often requires working outside standard office hours.
Please see full Job Description and Person Specification
Job description
Job responsibilities
Responsibility for the delivery of forensic acquisitions, processing and analysis (either on site or in the lab) of digital media for use in investigations by the NHSCFA and external stakeholders.
Being responsible for ensuring that acquisition, processing and analysis activities are compliant with relevant evidential and professional standards and are undertaken using techniques and procedures that maintain the integrity of digital data.
Producing statements and exhibits to a standard suitable for use in Crown Court for criminal or civil proceedings.
Testifying in Crown Court and civil proceedings as required, on results of seizure, handling of evidence and results of analysis conducted.
Ensuring that all digital material is properly collected, preserved, transported, and stored.
Supporting onsite investigative activity, either in person or remotely as and when required. Flexibility is required as this often requires working outside standard office hours.
Please see full Job Description and Person Specification
Person Specification
Specialist Knowledge
Essential
- Thorough understanding of the issues surrounding the proper handling of evidence.
- Thorough understanding of the ACPO Good Practice Guide for Computer- based Electronic Evidence.
- Trained to use FTK, Digital Collector and Cellebrite Inspector, Encase, Axiom, UFED, XRY and Oxygen forensic tools.
- Demonstrate knowledge in at least some of the following areas / operating systems; oFile servers (Microsoft / Apple / Unix / Linux). oNetworking (IP / LAN / WAN / Firewalls). oEmail servers and clients. oPeripherals (e.g. removable media, USB, CD's DVD's). oWorkstations (Microsoft / Apple / Unix / Linux). oFile systems (FAT / ExFAT, NTFS / HFS, APFS, etc). oHard drives (IDE, SSD, SATA, SCSI, RAID, SAN).
- Comprehensive knowledge of Data Protection issues
- Knowledge and understanding of the requirements of ISO27001 Information Security Management System
Desirable
- An understanding of service management (ITIL) procedures.
- Working knowledge of programming in Python, EnScript, C, SQL or similar language.
Experience
Essential
- Experience in undertaking digital forensics investigations, exhibiting evidence and producing witness statements suitable for Crown Court.
- Extensive staff management experience and knowledge of management and leadership practices.
- Experience of delivering high level outcomes in a pressured situation.
- Experience of providing clear, evidence based balanced assessment at management level.
- oExperienced strategic thinker. Capable of future proofing and forward planning at a corporate level
Qualifications
Essential
- Degree or equivalent level qualification in IT or related field.
- Either hold any of the following professional Digital Forensics qualifications or demonstrate equivalent knowledge and experience: oMicrosoft Certified Professional (M.C.P.); oAccessData Certified Examiner (ACE); or oEnCase Certified Examiner (EnCE)
Desirable
- Forensic Computing Foundation Level
Communication Skills
Essential
- Exceptional interpersonal skills and behaviours.
- Excellent negotiation and influencing skills, especially handling complex issues and topics with the media.
Other Skills
Essential
- Demonstrable ability in an analytical approach to identifying problems and developing real and practical solutions.
- Can demonstrate highly developed staff management and leadership skills including the ability to motivate and delegate effectively.
- Can demonstrate the ability to prioritise effectively, set targets and monitor achievements to deliver quality Digital Forensics services in a number of diverse tasks whilst working to tight deadlines.
- Demonstrable understanding and track record in promoting equal opportunities and diversity.
- An ability to lead a team effectively, presenting the very highest leadership qualities and exemplary management behavioural characteristics.
- A forward thinking attitude to identify high level research opportunities and use initiative in the development of future digital forensic improvements and solutions.
- Ability to be innovative, exercise initiative and develop solutions.
- Considerable personal initiative and can demonstrate an ability to work with a high degree of autonomy.
- Must be able to use fine/precision screwdrivers in order to safely remove and replace storage media (such as Hard Drives, Solid State Disks, NVMe) from Computers, Laptops and Servers)
Person Specification
Specialist Knowledge
Essential
- Thorough understanding of the issues surrounding the proper handling of evidence.
- Thorough understanding of the ACPO Good Practice Guide for Computer- based Electronic Evidence.
- Trained to use FTK, Digital Collector and Cellebrite Inspector, Encase, Axiom, UFED, XRY and Oxygen forensic tools.
- Demonstrate knowledge in at least some of the following areas / operating systems; oFile servers (Microsoft / Apple / Unix / Linux). oNetworking (IP / LAN / WAN / Firewalls). oEmail servers and clients. oPeripherals (e.g. removable media, USB, CD's DVD's). oWorkstations (Microsoft / Apple / Unix / Linux). oFile systems (FAT / ExFAT, NTFS / HFS, APFS, etc). oHard drives (IDE, SSD, SATA, SCSI, RAID, SAN).
- Comprehensive knowledge of Data Protection issues
- Knowledge and understanding of the requirements of ISO27001 Information Security Management System
Desirable
- An understanding of service management (ITIL) procedures.
- Working knowledge of programming in Python, EnScript, C, SQL or similar language.
Experience
Essential
- Experience in undertaking digital forensics investigations, exhibiting evidence and producing witness statements suitable for Crown Court.
- Extensive staff management experience and knowledge of management and leadership practices.
- Experience of delivering high level outcomes in a pressured situation.
- Experience of providing clear, evidence based balanced assessment at management level.
- oExperienced strategic thinker. Capable of future proofing and forward planning at a corporate level
Qualifications
Essential
- Degree or equivalent level qualification in IT or related field.
- Either hold any of the following professional Digital Forensics qualifications or demonstrate equivalent knowledge and experience: oMicrosoft Certified Professional (M.C.P.); oAccessData Certified Examiner (ACE); or oEnCase Certified Examiner (EnCE)
Desirable
- Forensic Computing Foundation Level
Communication Skills
Essential
- Exceptional interpersonal skills and behaviours.
- Excellent negotiation and influencing skills, especially handling complex issues and topics with the media.
Other Skills
Essential
- Demonstrable ability in an analytical approach to identifying problems and developing real and practical solutions.
- Can demonstrate highly developed staff management and leadership skills including the ability to motivate and delegate effectively.
- Can demonstrate the ability to prioritise effectively, set targets and monitor achievements to deliver quality Digital Forensics services in a number of diverse tasks whilst working to tight deadlines.
- Demonstrable understanding and track record in promoting equal opportunities and diversity.
- An ability to lead a team effectively, presenting the very highest leadership qualities and exemplary management behavioural characteristics.
- A forward thinking attitude to identify high level research opportunities and use initiative in the development of future digital forensic improvements and solutions.
- Ability to be innovative, exercise initiative and develop solutions.
- Considerable personal initiative and can demonstrate an ability to work with a high degree of autonomy.
- Must be able to use fine/precision screwdrivers in order to safely remove and replace storage media (such as Hard Drives, Solid State Disks, NVMe) from Computers, Laptops and Servers)
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details
Employer name
NHS Counter Fraud Authority
Address
7th Floor, HM Government Hub
10 South Colonnade, Canary Wharf
London
E14 4PU
Employer's website
https://cfa.nhs.uk/ (Opens in a new tab)
