Group Head of Forensics Services at Old Mutual Kenya

The overall responsibility of this role is to oversee the implementation of forensics and investigation policies, prevention/sensitization/training staff and other stakeholders on proactive fraud prevention measures, act as a liaison person between the Group and Business Units and other law enforcement agencies including court appearances, monitor staff integrity and escalate any concerns for remedial action by the bank’s management.

Investigation

• Provide Group wide investigation capability and lead significant and sensitive fraud, theft and corruption cases.
• Ensure that matters where there is a significant fraud loss to the Group / business unit, that a Steerco is established, comprising of all relevant stakeholders, to ensure that there is proper management over such cases and that recovery efforts are maximized.
• Ensure that any control failures identified during an investigation are immediately brought to the attention of responsible business unit.
• Continuously evaluate cases allocated to direct reports for investigation in line with set guidelines and standards.
• Liaise and work with law enforcement agencies, professionals, and commercial organizations in this field of expertise.
• Develop training awareness courses, workshops, brochures, and other material to alert employees as to the Bank’s policy on relevant forensic investigation topics.

Drive Digital Forensics Strategy and Capabilities

• Set up a functioning and effective Forensics Lab to support the fraud and investigations initiatives across the Group.
• Conduct forensically sound acquisitions, analysis and examinations of computer systems and associated media, either on-site or in the lab, ensuring continuity of all exhibits and maintaining integrity throughout.
• Secure and retrieve data from computer systems, utilize proprietary and bespoke software, to preserve evidence gathered during investigations.
• Provide a scene/fieldwork response to digital investigations.
• To record the details of analysis and investigations undertaken and maintain the confidentiality of this information.
• Provide high quality written and oral evidence to support the investigation/operation that can be presented and used by officers/DPP.
• Attend Court as a witness in support of such evidence.
• Conduct and assist on complex cases; providing specialist support to internal and external partners; and
• Work with Senior Investigators to determine appropriate digital forensic strategies for investigations.

Stakeholder Management

• Engage and communicate the department’s philosophy to direct reports/stakeholders and ensure they understand the responsibility of the department vs. Business Unity responsibility.
• Interact with counterparts in the industry to share information, engender co-operation to gain a common understanding of the threats and risks.
• Build and maintain relationships with other external parties (e.g. Insurance Fraud Investigative Unit, Criminal Investigative Department, Revenue Authority, Office of the Director of Public Prosecutions) to ensure that co-operation can be obtained when required for key investigations.
• Communicate the Forensic Investigations philosophy to direct reports / stakeholders and ensure they understand the responsibilities of Forensic Investigations vs. business unit responsibilities.
• Identify fraud risks and emerging risks during the course of an investigation or interactions with internal / external stakeholders are escalated upon discovery, to the relevant Business Unit and for assessment and closing "gaps" related to processes, policies, and systems. Interact with counterparts in the industry to engender co-operation and gain a common understanding of threats and risks.

People Management

• Manage a team to ensure effective delivery of services to Stakeholders
• Determine and analyze development needs for the team and ensure that identified training requirements are budgeted for and executed.
• Develop a high performing team by embedding formal performance development and informal coaching.
• Encourage frequent knowledge sharing between team members.
• Review and maintain succession plans for one level below.

Business Management

• Translate set strategy into operational business plans.
• Constantly review the number of cases reported to improve the investigation methodologies, criteria and adjust accordingly to a risk- based approach.
• Conduct monthly oversight reviews with direct reports to understand the business performance and support them to develop corrective actions where required.

Operational Oversight and Guidance

• Assess and update the investigative policies/procedures and ensure implementation and adherence.
• Ensure that minimum investigation standards are set and adhered to.
• For sensitive or high-risk cases (on an ad hoc basis or when tasked by management) execute the investigation activities end-to-end or, if appropriate, delegate to one of the direct reports.
• Ensure that feedback is provided to management/stakeholder in so far as high level/sensitive cases are concerned.
• Provide suitable training material, best practice activity and advisory services to the Forensic function in the area of your expertise.

Cyber Security

• Review business and cyber security environment to identify areas where fraud can occur.
• Develop a cyber fraud management plan with appropriate detection, response and recovery capabilities.
• Assess the effectiveness of the measures against cyber fraud risk management plan.
• Develop a documented action plan containing policies, practices and procedures that mitigate the identified risks.
• Establish a standard methodology for performing cyber related frauds to ensure evidence obtained can be presented in the court of law should there be need.
• Evaluate effectiveness of current Cyber fraud response plan against industry practices.
• Evaluate response plans periodically to ensure relevance.
• Rate and categorize potential cyber fraud incidents.
• Recommend suitable enhancements to improve cyber fraud performance.

MINIMUM QUALIFICATIONS/EXPERIENCE (REQUIRED FOR THE JOB)

• BSc from a recognized University preferably in Computer Science, Finance, Business, Banking, Law, Criminal Justice Studies, or a relevant field. MBA degree will be an added advantage
• Post graduate qualification in Digital Forensics together with industry certifications such as Access Data Certified Examiner, Certified EnCase Examiner etc.
• Professional qualification in CFE / CISA / CISM or other relevant certification is an added advantage.
• Experience of working in a multinational, multi-segment, environment with matrix reporting
• More than 5 years’ experience in leading a fraud / forensic investigations team with a minimum of  3 years’ direct digital forensics experience using Analytics techniques and tools (Linear and Logistic Regression, Clustering Techniques, Neural Network, Decision Trees, etc. for fraud risk management
• Familiarity with wide array of Fraud Analysis tools, applications and solutions such as FTK, Encase, Axiom, Cellebrite, Tableau, Write Blockers