Digital Forensics Officer

Organizational Setting

The Office of the Inspector‑General (OIG) provides oversight of FAO's programmes and operations through internal audit and investigations. The Investigations Branch (OIGI) investigates allegations of misconduct involving FAO personnel and allegations of sanctionable actions involving third parties. OIG's investigation mandate covers misconduct such as fraud, corruption, abuse of privileges and immunities; sexual exploitation and abuse; sexual harassment; workplace harassment and abuse of authority; retaliation against whistle blowers; or any other conduct not in conformity with the Standards of Conduct of the International Civil Service. OIG also prepares reports to the Director‑General and Senior Management on lessons learned and proactive integrity reviews, and promotes policies and activities that enhance the integrity of FAO's operations.
The position is located in the Office of the Inspector‑General (OIG) at FAO headquarters in Rome, Italy.

Reporting Lines

The Digital Forensics Officer reports to a Senior Investigator (Head of Unit), OIG.

Technical Focus

Digital forensic support to OIG's investigations into allegations of misconduct involving FAO personnel and third parties, and advice on the enhancements of integrity policies of the Organization.

Key Results

Support the planning and conduct of digital forensic investigative activities in relation to allegations of fraud, corruption, sexual exploitation and abuse, workplace harassment and sexual harassment, and other types of misconduct, the development of recommendations to support management decisions and improve internal controls over fraud risks and to prevent and timely detect violations of FAO policies, and the promotion of policies and activities to enhance the integrity of FAO operations in accordance with the highest ethical standards.

Key Functions

• Provides digital forensic investigative support to OIG investigations, including during the intake analysis of incoming complaints, as well as the preliminary review and investigation process.
• Identifies, collects, analyses and preserves electronic evidence and data (including data from open source and available in FAO corporate databases), in accordance with applicable standards and protocols for evidentiary material.
• Performs digital forensic analysis using validated techniques, methods and tools, including the verification of open source digital content.
• Assists in understanding the results of digital forensic examination, and in determining the credibility and reliability of electronic evidence and data.
• Prepares detailed, clear and concise forensic analysis reports and other written outputs through accurate, reliable and thorough documenting of methods, tools and activities.
• Ensures that digital forensic investigation activities are targeted and relevant to the investigative scope in each specific case at stake.
• Supports investigative personnel with data visualization and presentation, particularly for complex cases.
• Participates in the organization and follow‑up of interviews and other consultations as required, in particular concerning lines of questioning regarding electronic evidence and data.
• Provides support to various policy‑related initiatives, internal guidelines and other matters under review by the Office concerning digital forensics and information technology.
• Maintains proficiency with digital forensic tools and keeps a technological watch over available tools and new trends that may be relevant to the work of the Office.
• Prepares and delivers tailored training sessions for OIG personnel on topics relating to digital forensic investigations and information technology.
• Maintains OIG records and stores materials related to the investigations in accordance with internal procedures.
• Contributes to the organization's overarching strategy for cybersecurity, data protection, artificial intelligence, and topics related to information technology.
• Performs other duties as required.

Specific Functions

• Collects, processes, analyses and preserves electronic data and evidence, including open source and corrupt/deleted data, relevant to intake, preliminary review and investigation activities, when necessary in consultation with the Senior Investigator and/or the assigned investigator.
• Collaborates with and supports investigators in conducting digital evidence collection and analysis, identifying any sensitive issues and proposing course of action, such as new opportunities to source data.
• Assists and/or participates in field missions, as necessary, to carry out forensic investigative activities; prepares the necessary equipment and consumables and provides guidance to investigative personnel.
• Performs or guides investigative personnel with remote digital forensic investigative activities.
• Drafts written outputs about forensic activities and findings.
• Contributes to the organization's cybersecurity, data protection, and artificial intelligence initiatives collaborating with internal stakeholders to ensure cohesive execution of these activities.
• Evaluates current and emerging activities for compliance with cybersecurity and data protection standards, while promoting automation by contributing to the development and deployment of innovative tools.

Minimum Requirements

• Advanced university degree (Master's degree or equivalent) in digital forensics, computer science, information technology, criminal and forensics sciences, or a related field (candidates holding a first-level university degree in above-mentioned fields may also be considered if possessing two (2) additional years of relevant work experience in fact‑finding/investigatory work using computer science and information technology applied to the collection and analysis of digital data and a professional certification in the field of computer forensics).
• Three years of relevant experience in fact‑finding/investigatory work using computer science and information technology applied to the collection and analysis of digital data.
• Working knowledge (proficiency - level C) of English and intermediate knowledge (intermediate - level B) of another official FAO language (Arabic, Chinese, French, Russian or Spanish).

Competencies

• Results Focus
• Team Work
• Communication
• Building Effective Relationships
• Knowledge Sharing and Continuous Improvement

Technical/Functional Skills

• Work experience in more than one location or area of work, particularly in field positions.
• Demonstrated knowledge in computer science and information technology applied to investigations and/or to the oversight function, including digital forensic tools (e.g. Encase Forensic, Magnet Axiom, Intella), methodologies, and protocols.
• Extent and relevance of experience in carrying out digital forensics activities, including eDiscovery, in the conduct of fact‑finding/investigatory work.
• Demonstrated experience in internal administrative investigations, including but not limited to fraud, corruption and sexual misconduct, is desirable, preferably gained in an international setting.
• Knowledge and understanding of principles, concepts and processes relevant to administrative and/or criminal investigations.
• Ability to analyse large volume of complex and conflicting evidence.
• Expertise in cybersecurity, data protection, and implementation of automation and AI‑driven solutions.
• Strong English writing skills to prepare clear and concise technical outputs and other relevant documents to be incorporated into investigative files and submissions.
• Work experience in an international setting is desirable.
• Experience in developing and executing scripts using PowerShell, Python or other programming languages would be an advantage.

EEO Statement

• FAO is committed to achieving workforce diversity in terms of gender, nationality, background and culture
• Qualified female applicants, qualified nationals of non‑and under‑represented Members and persons with disabilities are encouraged to apply
• Everyone who works for FAO is required to adhere to the highest standards of integrity and professional conduct, and to uphold FAO's values
• FAO, as a Specialized Agency of the United Nations, has a zero‑tolerance policy for conduct that is incompatible with its status, objectives and mandate, including sexual exploitation and abuse, sexual harassment, abuse of authority and discrimination
• All selected candidates will undergo rigorous reference and background checks
• All applications will be treated with the strictest confidentiality
• FAO staff are subject to the authority of the Director‑General, who may assign them to any of the activities or offices of the Organization.