Manager - Forensic and Fraud Investigation (Cyber Security)

Manager : Forensic & Fraud Investigations (Cyber Security)

Location: [Mumbai]

Reports to: Director / Partner, Cyber Security

Experience: 8-12 years

About the role

You will lead investigations into frauds and incidents that have already happened. That means working out what occurred, who was involved, how the controls failed, and what was lost. You will then design the fixes that stop it happening again. The work covers cyber-enabled fraud, insider misconduct and financial crime for enterprise clients, with a focus on evidence that holds up in legal, regulatory and audit settings.

Key responsibilities

Investigate

• Run end-to-end post-fraud investigations covering scoping, evidence collection, analysis, reconstruction of the timeline and reporting.
• Identify the fraud typology and modus operandi: payment and account takeover fraud, insider fraud, procurement or vendor fraud, business email compromise, data theft, identity and KYC fraud, and misuse of privileged access.
• Trace the flow of funds and data, and identify the individuals, accounts and systems involved.
• Lead digital forensics work: disk, memory, mobile, email, cloud and log analysis, with strict chain of custody.
• Perform forensic data analytics, including transaction, access-log and anomaly analysis, to find patterns and the full extent of the fraud.

Find the root cause

• Establish how the fraud was possible by identifying control gaps in process, technology, access management and governance.
• Assess whether the same weakness exists elsewhere in the organisation.

Mitigate and remediate

• Design a remediation plan that closes the gaps: preventive and detective controls, fraud monitoring rules, access and segregation-of-duties fixes, approval workflows and vendor controls.
• Recommend technology and process improvements such as real-time alerts, UEBA, DLP and transaction monitoring.
• Define a roadmap with owners, priorities and timelines, and follow up on implementation.

Report and support proceedings

• Prepare clear, defensible reports for the Board, Audit Committee, regulators and law enforcement.
• Support legal proceedings, disciplinary action and regulatory reporting, and act as an expert witness where needed.

Lead and grow

• Manage a team of consultants and senior consultants, and review their work for quality.
• Support business development, proposals and client conversations.

Required qualifications

• 8-12 years in forensic investigations, fraud risk management or cyber incident response, ideally in a consulting firm, a bank or an investigations team.
• Hands-on experience running fraud or misconduct investigations from start to finish.
• Working knowledge of forensic tools (e.g. EnCase, FTK, Cellebrite, Magnet AXIOM) and analytics tools (SQL, Python, Power BI, or similar).
• Strong grasp of fraud controls, internal controls frameworks and regulatory requirements (RBI fraud guidelines, SEBI, Companies Act, PMLA, DPDP Act, IT Act, BSA/Evidence Act provisions on electronic evidence).
• Ability to write clear reports and present findings to senior stakeholders.
• Bachelors degree in engineering, accounting, commerce, law or a related field.
• At least one certification: CFE, CISA, CFCE, GCFE/GCFA, CISSP, or equivalent.

Preferred

• Experience in BFSI, fintech, insurance or e-commerce.
• Exposure to AML, sanctions or anti-bribery investigations.
• Experience with cloud and SaaS forensics.

Competencies

Analytical rigour, attention to detail, sound judgement on sensitive matters, confidentiality, clear writing, and the composure to work under pressure.