Senior Digital Forensic Specialist

Job title: Senior Digital Forensic Specialist
Grade: Grade G
Role code: SSC128
Status: Police Staff
Home Office code: Operational Support

Main purpose of the role:

Manage the performance and activities of a team of Digital Forensic staff by coordinating and prioritising the operational requests and demand for Digital Forensic data acquisition and analysis, ensuring that the forensics procedures are carried out efficiently and are quality controlled and adhere to relevant ISO accreditations. Maintain a personal caseload as an expert practitioner, ensuring that the team provides effective, efficient, and evidentially sound digital forensic support to investigators to support the criminal justice process.  

Main responsibilities:

• Undertake the day-to-day supervision of a team of digital forensic practitioners to ensure service delivery against published SLAs in support of investigations, ensuring compliance with ISO standards and relevant legislation.
• Manage the submissions by developing digital forensic strategies for examination, allocating cases and balancing workloads, to ensure the efficient and effective processing of cases cognisant of risks and quality assuring the work of the team.
• Supervise, coach, and motivate the team, managing collective and individual performance, participating in recruitment and selection, undertaking staff appraisals, addressing initial welfare, capability, and discipline issues, advising on personal development to enable consistent high-quality performance and ensure that a professional and efficient service is provided at all times.
• Effectively utilising the quality management framework including audits, dip checks and peer review to enable the sharing of good practice and continual improvement of the Digital Forensic function.
• Undertake a personal caseload, providing expert advice performing the role of Digital Forensic Senior Specialist, preparing and presenting evidence in court including the production and presentation of bespoke complex technical reports in support of the criminal justice process.
• Develop and maintain competence under ISO requirements sustaining an up- to-date technical knowledge of specialised Digital forensic procedures, and advancements within the Digital Forensic field liaising with internal and external colleagues in other specialisms in order to share good practice.
• Review the technical equipment and software used, assessing future needs and advancements of equipment, making recommendations in terms of purchasing, to ensure that the team is equipped to meet the operational needs.
• Deliver presentations, briefings, and training to police officers and staff, maintaining close links with investigators to enhance knowledge and awareness of digital capabilities and their use.

March 2023

Vetting level:

Security Check (SC)

Necessary experience:

The post holder will be educated to degree level in a relevant subject or equivalent and / or will be an experienced Digital Forensic Specialist with at least 5 to 10 years experience gained from working in a policing environment.

The post holder will have the experience of providing digital analytical capability for major and serious offences and experience of investigative strategies. Knowledge of sentencing guidelines for major and serious offences is required to devise appropriate digital forensic strategies.

The post holder must have experience in coaching, supporting, and developing staff, and putting in place individual development plans for staff.

The post holder will have significant knowledge in how digital devices function and how to harvest the data contained within them. They must be able to advise and guide across a range of digital disciplines including but not limited to mobile phones, computer, and CCTV forensics. They will be competent under ISO 17025 and maintain an environment that meets this accreditation standard.

The post holder will have knowledge of relevant legislation including: Regulation od Investigatory Powers Act, Data Protection and Criminal Procedures and Investigations Act (CPIA) legislation to provide the required advice and guidance. They will also need to keep abreast of changing technologies and be prepared to undergo continuous professional development.

This role requires highly effective interpersonal, communication, negotiation and influencing skills, together with strong customer service delivery ethos. The post holder will be a self-motivated, proactive, and organised individual with the capability of prioritising competing demands with minimal supervision. They will be fully IT literate, and well versed in a wide range of software packages and be able to rapidly familiarise themselves with new and emerging Digital technologies. The post holder will work a 7-day working shift pattern.

Behaviours:

Analyse Critically (Level 2)

I ensure that the best available evidence from a wide range of sources is taken into account when making decisions. I think about different perspectives and motivations when reviewing information and how this may influence key points. I ask incisive questions to test out facts and assumptions, questioning and challenging the information provided when necessary. I understand when to balance decisive action with due consideration. I recognise patterns, themes and connections between several and diverse sources of information and the best available evidence. I identify when I need to take action on the basis of limited information and think about how to mitigate the risks in doing so. I challenge others to ensure that decisions are made in alignment with our mission, values and the Code of Ethics.

Collaborative (Level 2)

I manage relationships and partnerships for the long term, sharing information and building trust to find the best solutions. I help create joined-up solutions across organisational and geographical boundaries, partner organisations and those the police serve. I understand the local partnership context, helping me to use a range of tailored steps to build support. I work with our partners to decide who is best placed to take the lead on initiatives. I try to anticipate our partners' needs and take action to address these. I do not make assumptions. I check that our partners are getting what they need from the police service. I build commitment from others (including the public) to work together to deliver agreed outcomes.

Deliver, Support and Inspire (Level 2)

I give clear direction and expectations, helping others to understand how their work operates in the wider context. I identify barriers that inhibit performance in my teams and take steps to resolve these, enabling others to perform. I lead the public and / or colleagues, where appropriate, during incidents or through the provision of advice and support. I ensure the efficient use of resources to create the most value and the right impact within my areas. I keep track of changes in the external environment, anticipating both the short and long term potential implications for the Police Service. I motivate and inspire others to achieve their best.

Emotionally Aware (Level 2)

I consider the perspectives of people from a wide range of backgrounds before taking action. I adapt my style and approach according to the needs of the people I am working with, using my own behaviour to achieve the best outcome. I promote a culture that values diversity and encourages challenge. I encourage reflective practice among others and take the time to support others to understand reactions and behaviours. I take responsibility for helping to ensuring the emotional well being of those in my teams. I take the responsibility to deal with any inappropriate behaviours.

Innovative and Open-minded (Level 2)

I explore a number of different sources of information and use a variety of tools when faced with a problem and look for good practice that is not always from policing. I am able to spot opportunities or threats which may influence how I go about my job in the future by using knowledge of trends, new thinking about policing and changing demographics in the population. I am flexible in my approach, changing my plans to make sure that I have the best impact. I encourage others to be creative and take appropriate risks. I share my explorations and understanding of the wider internal and external environment.

Take Ownership (Level 2)

I proactively create a culture of ownership within my areas of work and support others to display personal responsibility. I take responsibility for making improvements to policies, processes and procedures, actively encouraging others to contribute their ideas. I am accountable for the decisions my team make and the activities within our teams. I take personal responsibility for seeing events through to a satisfactory conclusion and for correcting any problems both promptly and openly. I actively encourage and support learning within my teams and colleagues.

Values:

Impartiality (accredited)

I take into account individual needs and requirements in all of my actions. I understand that treating everyone fairly does not mean everyone is treated the same. I always give people an equal opportunity to express their views. I communicate with everyone, making sure the most relevant message is provided to all. I value everyone's views and opinions by actively listening to understand their perspective. I make fair and objective decisions using the best available evidence. I enable everyone to have equal access to services and information, where appropriate.

Integrity (accredited)

I always act in line with the values of the police service and the Code of Ethics for the benefit of the public. I demonstrate courage in doing the right thing, even in challenging situations. I enhance the reputation of my organisation and the wider police service through my actions and behaviours. I challenge colleagues whose behaviour, attitude and language falls below the public's and the service's expectations. I am open and responsive to challenge about my actions and words. I declare any conflicts of interest at the earliest opportunity. I am respectful of the authority and influence my position gives me. I use resources effectively and efficiently and not for personal benefit.

Public service (accredited)

I act in the interest of the public, first and foremost. I am motivated by serving the public, ensuring that I provide the best service possible at all times. I seek to understand the needs of others to act in their best interests. I adapt to address the needs and concerns of different communities. I tailor my communication to be appropriate and respectful to my audience. I take into consideration how others want to be treated when interacting with them. I treat people respectfully regardless of the circumstances. I share credit with everyone involved in delivering services.

Transparency (accredited)

I ensure that my decision-making rationale is clear and considered so that it is easily understood by others. I am clear and comprehensive when communicating with others. I am open and honest about my areas for development and I strive to improve. I give an accurate representation of my actions and records. I recognise the value of feedback and act on it. I give constructive and accurate feedback. I represent the opinions of others accurately and consistently. I am consistent and truthful in my communications. I maintain confidentiality appropriately.

Technical skills:

Computer/Telephone Evidence Recovery (Level 5)

Has a thorough understanding of the examination and analysis of computers and/ or telephone equipment and the laws affecting them and is able to apply this knowledge effectively to the role. Able to advise on the content of policy in relation to the seizure and examination of computers / telephone equipment thought to have been used in crime. Is experienced in giving evidence at court in complex cases.

Crime Investigation (Level 4)

Able to recognise potential conflicts of interest between solicitors and suspects. Effectively plans and prepares work in order to progress investigations. Analyses results obtained from interviews etc., in order to identify further offences, offenders and lines of enquiry. Has a comprehensive understanding of identification policies, procedures and their applications. Submits high quality reports and case files within time limits. Has an appreciation of the operating practices of the intelligence unit.

Digital Crime (Level 5)

Supervises and co-ordinates the activities of other investigators providing advice and guidance on the whole range of digital techniques, policies and procedures. Understands the ACPO digital forensic principles and is able to apply them to decision making. Acts as a Case Review Officer. Pro-actively uses information gained form external agencies to further investigative and prevention opportunities. Undertakes detailed and comprehensive case investigations

Health & Safety (Level 4)

Has received Supervisor training and takes responsibility for the safety of directly subordinate staff and visitors. Understands the procedures in place for the safe storage of hazardous substances, fire precautions and evacuation. Resolves hazards or problems identified within roles or work environments. Undertakes skills passport assessments for new and existing staff. Re-assesses passport as and when new equipment /technology is introduced.Completes annual reviews of skills passports, training needs analysis.

Information Management & Technology (Level 5)

Can retrieve information from computer searches across data source boundaries e.g. across a number of data sources, across county. Can analyse and compare data from such searches. Understands significance of findings and can provide guidance on the reliability of forecasts resulting from data analysis. Can monitor data quality in the work of others, and may manage the impact of data quality issues.

Internal Consultancy (Level 4)

Demonstrates an in depth knowledge of the relevant specialist area and combines this with high level consultancy skills. Develops collaborative relationships with internal clients and works with them to achieve joint objectives and targets. Maintains an up to date awareness of all developments which may affect Force business and policies and proactively advises clients of all relevant matters.

Knowledge of Police Environment & Policy (Level 4)

Displays a general appreciation of changes affecting the police service. Understands the inter-relationships between the roles of the various Operational and Support activities, and how organisation structures and police systems work. Possesses a detailed understanding of working procedures, practices and policies relevant to the current role and the roles of subordinates and ensures that these are followed at all times. Is clear about Force goals and effectively contributes to local business plan objectives.

Management of Police Information (MOPI) (Level 5)

Has sufficient understanding of the NPCC records management policies be able to offer appropriate guidance and support to staff. Is able to identify the appropriate MOPI group for any record with a policing purpose and ensure that all policing records within the team are retained, reviewed or destroyed in line with the MOPI codes of practice. Quality assures staff to ensure a full understanding and compliance with the APP for Information Management (incorporating MOPI guidance), highlighting failings and taking appropriate action as required. Ensures training and / or refresher training is provided and completed. Ensures that systems are correctly linked together to ensure effective management and recording of information across systems. Appropriately reviews digital information held on system(s) and physical records in storage to ensure that they are retained only where there is a policing purpose. Complies with relevant policies and procedures in respect of prioritisation, sanitisation, dissemination, sharing, relevancy, accuracy, adequacy and timeliness.

Office Technology (Level 4)

Demonstrates advanced skills in the use of one or more office software products Able to use these packages to enhance the quality or presentation of work required within the role. Manages data files and file structures. Provides on the job training and guidance to other staff in the use of specific or specialist software, if required. Familiar with established IT rules and protocols and shows a good understanding of data protection requirements.

Research Techniques (Level 4)

Has a thorough understanding of research methods and is able to fully utilise these for a range of research projects. Able to analyse reports and data produced by other individuals/ organisations and extract relevant details to support the project in hand. Produces a range of options for consideration. Aware of the financial, organisational and service delivery implications of options.

Risk Management (Level 4)

Able to anticipate risks likely to affect the team's ability to execute their function, in terms of likelihood and impact, and assesses how the challenges facing the wider organisation might affect their team and their objectives. Has an understanding of pathways to alert local managers to flawed or ineffective operational control strategies and provide continuity/recovery options. Has an appreciation that seizing opportunities also generates risks.

National Occupational Standards:

AA1 (Level Accredited)

Promote equality and value diversity.