About the position The Internal Security Investigator is an important risk-mitigation partner supporting the Information Security Program. You will respond to cyber security alerts and data loss events ranging from misuse of company systems, unauthorized software and data exfiltration to code-of-conduct violations and threats against the company caused by internal personnel, contractors, third party suppliers or external threat actors. You will act as the lead technical investigator for information gathering, analysis and reporting in support of digital investigations and eDiscovery requests for IT Risk, Security Engineering, Legal and People teams. You will recommend system, process and procedural changes to mitigate risks and safeguard company assets and reputation.

Responsibilities

• Lead investigations of data loss and eDiscovery matters
• Produce fact-based technical reports detailing events over specified periods of time for the investigation and share the report with stakeholder to act on
• Advise stakeholders on the relevance of the information derived from internal and external sources, forensic inquiries and investigative work.
• Identify and propose areas of improvement in internal controls, investigative processes and procedures
• Ensure all digital evidence is captured in a legally appropriate manner (Chain of Custody) to protect the company against wrongful termination lawsuits
• Conduct interviews with an investigative mindset

Requirements

• Bachelor or Master’s Degree in Computer Science, Digital Forensics or experience in related law enforcement or investigations field
• 5+ years of experience in one or more of the following: Information Security, demonstrating experience in investigating and data loss incident response
• In depth understanding of cyber investigation, forensic tools and methodologies including log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative process.
• Be familiar with the basic understanding of legalities surrounding discovery and analysis of electronically stored information

Nice-to-haves

• Strong background in data loss prevention incidents and investigation case management
• In depth technical knowledge of email, Slack, Google suite infrastructure, Windows and Apple devices, mobile phones as well as forensic tools and forensic methodologies
• Strong investigative and analytical mentality and problem solving skills
• Ability to multitask in a time sensitive environment with awareness of confidentiality and privacy laws
• An efficient and versatile communication style
• Proven integrity and judgement in a professional environment
• Industry recognized certifications such as Certified Fraud Examiner (CFE) a plus

Benefits

• Health, dental, and vision insurance including mental health benefits
• 401(k) matching plus a roth option (U.S. Based employees only)
• PTO & paid holidays off
• Sabbatical program (for eligible roles)
• Summer hours (for eligible roles)
• Paid parental leave
• DEI groups (B.L.A.C.K. @ Enova, HOLA @ Enova, Women @ Enova, Pride @ Enova, South Asians @ Enova, APEX @ Enova, and Parents @ Enova)
• Employee recognition and rewards program
• Charitable matching and a paid volunteer day