±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 2 Overall: 36767
New Yesterday: 4 Visitors: 157

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Senior Cyber & Digital Practitioners £55k+ package, UK

Forensic Focus has a new job board and this forum has now been archived. If you are a job seeker, please view our current list of job vacancies at https://jobs.forensicfocus.com/jobs/ If you are an employer/agency and wish to post your job vacancies, please register at https://jobs.forensicfocus.com/registration/
This topic is locked: you cannot edit posts or make replies.This topic is locked: you cannot edit posts or make replies. Printer Friendly Page
Forum FAQSearchView unanswered posts


Senior Cyber & Digital Practitioners £55k+ package, UK

Post Posted: Jan 12, 19 12:32

Senior Cyber & Digital Practitioners
HM Revenue and Customs
Closing date: 31 Jan 2019

Civil Service Job Reference: 1614035

Salary: National £36,750 - National £40,930, London £39,730 - London £44,240
Attendance Allowance: £17,363 [National] £18,897 [London]
Grade: Senior Executive Officer
Contract type: Permanent
Business area: HMRC - CCG - Fraud Investigation Service - Digital Support & Innovation
Type of role: Digital
Working pattern: Flexible working, Full-time, Job share, Part-time
Hours: 36/37
Number of posts: 4
Location: City of London, London, EC3R 6EE : Nottingham, East Midlands, NG2 1BG

About the job

Job description

HMRC’s Fraud Investigation Service (FIS) is responsible for the department’s civil and criminal investigations. FIS ensures that HMRC has an effective approach to tackling the most serious tax evasion and fraud. FIS is home to a wide range of people with a variety of skills and professional backgrounds – including accountants, cybercrime specialists, criminal justice professionals, tax professionals and operational delivery support teams to name but a few. We use a range of powers and approaches to protect funding for UK public services, investigating the most harmful tax cheats and ensuring nobody is beyond our reach.

Digital Support and Innovation (DSI) is the specialist support business area responsible for the provision of enhanced digital and specialist technological support to FIS investigations. DSI provides investigative tools and techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime.

HMRC's Cyber & Digital Forensics Group (C&DF) plays an integral role in Her Majesty's Government's fight against serious and organised crime, supporting investigations totalling hundreds of millions of pounds each year. Our forensic practitioners are a key part of the UK Law Enforcement community, working on a variety of cases, from corporate criminality to tobacco smuggling. C&DF is a well-established, national resource with a strong delivery record and a reputation for robust results. Our services are in high demand, as we embrace the challenges posed by the pace of technology development and advances in data exploitation. As such, we are looking for talented individuals with a passion for computer science to join our rapidly expanding team.

C&DF’s innovation and professionalism is recognised by international partners and we are frequently asked to speak at key events. R&D is essential to our mission – from deploying new approaches to RAM analysis to building bespoke tools – and we will be investing heavily over the coming months and years. There is scope for contributing to related initiatives, from helping HMRC develop its eDiscovery capability to working with C&DF’s dedicated infrastructure team as it prepares to launch a number of new services.

C&DF also works closely with HMRC’s Cybercrime team who investigate attacks on HMRC’s digital channels with a view to protecting online services that are used by millions of people. This is an exciting opportunity to hone your skills in the field of digital forensics, including working on mobile devices and vehicles. C&DF offers an extensive training programme with potential for industry certifications and technical career pathways from apprenticeships through to Grade 6.

Main purpose of role
The Senior Forensic Practitioner role in C&DF is pivotal to the successful delivery of the team and offers varied and challenging work.

The primary responsibility of the Senior Forensic Practitioner is to provide technical assistance to HMRC’s investigation teams through the forensic examination of digital media devices that have been or are suspected of being used in the commission of crime. This will include verbal updates and written summaries, including preparing reports and presenting evidential material to the Crown Prosecution Service (CPS) and the Court.

The difference between the Higher and the Senior roles is: the level of complexity of cases; the level of direction expected in terms of leading junior colleagues; and the expectation of managing on-site acquisition. You will be expected to liaise with Senior Investigation Officers (SIOs) running operations and their senior management structures.

It is therefore essential that applicants have current experience of conducting digital forensic examinations – gained through at least 3-5 years in a commercial, legal or law enforcement environment. Successful applicants must have an in-depth knowledge and understanding of criminal justice procedures including: the Regulation of Investigatory Powers Act (RIPA); the Police Act 1997; Criminal Procedures and Investigations Act (CPIA); and the Police and Criminal Evidence Act (PACE); with emphasis on disclosure obligations and procedures surrounding Legal Professional Privilege (LPP) material.

Key responsibilities and requirements

a) Assist in the seizure and retention of digital devices within a laboratory environment and at scenes for subsequent forensic examination;
b) Manage forensic exhibits to ensure continuity, confidentiality and security is maintained at all times;
c) Understand, follow and actively promote Digital Forensic good practice methodologies (ISO17025 standard and NPCC National Police Chiefs Counsel Principles of Digital Evidence) to examine computers, mobile phones and other digital devices;
d) Prepare evidential reports upon completion of Digital Forensic examinations;
e) Provide fact and procedural-based evidence at Court as and when required;
f) Good communicator who can perform in a client/customer facing role;
g) Ability to work independently in a fast-paced, multi-tasking environment;
h) Ability to work effectively as part of a team and support the team’s goals above individual goals;
i) Ability to work in a fast-paced, deadline-driven environment, managing multiple tasks through completion;
j) Ability to manage time and prioritise tasks effectively;
k) Be at the forefront of technical developments within Digital Forensics; and
l) To carry out any duties commensurate with the purpose of the post that may from time to time be determined.

Supervisory Responsibility

Coach/mentor laboratory Digital Forensic Practitioners, Higher Digital Forensic Practitioners and educate senior investigation colleagues about professionalism in the field of digital forensics.

Person specification
Essential Criteria:

• Experience of conducting digital forensic examinations and producing evidence in a criminal justice environment.
• Knowledge and understanding of criminal justice procedures including the Regulation of Investigatory Powers Act (RIPA), the Police Act 1997, Criminal Procedures and Investigations Act (CPIA) and the Police and Criminal Evidence Act (PACE).

Previous experience working in a Law Enforcement environment / legal environment would allow the successful candidate to demonstrate the following:

• Proficiency with one or more of the main digital forensic applications: AccessData FTK, Guidance Software EnCase, X-Ways Forensics or Nuix;
• Experience of giving evidence in court.
• Possess an ability to examine digital devices in a methodical and precise way and have an aptitude for problem solving;
• Have extensive knowledge of operating systems and have a solid understanding of digital devices;
• Ability to dismantle and/or safely handle digital devices for examination purposes, whilst maintaining accurate contemporaneous records. Identification, removal and safe handling of key digital device components;
• Experience and knowledge in performing Digital Forensic examinations; be able to demonstrate case experience within either the law enforcement or civil work environment;
• Be knowledgeable of the ISO 17025 standard and ACPO Principles of Digital Evidence;
• Have extensive working knowledge of relevant commercial and open-source software tools applicable to the role;
• Be able to regularly work with material that may be of an obscene, offensive or distressing nature. Treat such material in the appropriate manner ensuring it is secured and handled according to defined policies.
• Have attended and passed an accredited training course relevant to Digital Forensic examination of computer and/or mobile device based evidence.

Desirable Criteria:
• Knowledge of Mac, Linux or Unix
• Understanding of databases
• Programming skills
• Driving Licence

Degree or degree-level qualification in digital forensics or a related field and/or 3-5 years practical experience in a digital forensic environment. Qualifications and certifications held may include (but are not limited to): GCFE; MSc; EnCE; ACE; CCE; A+; MCP.


Civil Service pension schemes may be available for successful candidates.

CIDAA-T - Upper Tier

CIDAA-T is paid to FIS officers within a three-tiered structure that reflects the attendance requirement for the jobholder’s role. Additionally, there are separate rates for each of the tiers, to reflect the difference between the London and National pay areas. CIDAA-T is paid monthly with salary.

CIDAA is a category 2 attendance allowance. It is reviewed each year and the amount and scope of each tier are subject to change.

Further details of the rates of allowance, pensionability and attendance required are set out in the attached document.

If you are applying for a role in an office within a regional centre location or a transitional or specialist site, then the following may apply: Daily Travel Assistance will be available for this role, provided the successful applicant is a current HMRC employee and meets the eligibility requirements outlined in the department’s Daily Travel Assistance guidance.

Things you need to know

Successful candidates must pass a disclosure and barring security check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check.

Nationality statement
Candidates will be subject to UK immigration requirements as well as Civil Service nationality rules.

If you're applying for a role requiring security clearance please be aware that foreign or dual nationality is not an automatic bar. However certain posts may have restrictions which could affect those who do not have sole British nationality or who have personal connections with certain countries outside the UK.

Selection process details
In no more than 500 words explain why you would be suitable for this role. The personal statement will be assessed based upon the civil service competency framework and in particular the competencies Leading and Communicating and Delivering at Pace.

The selection process will consist of the initial sift of the personal statement and CV. Those who are successful will be selected for formal interview and an assessment of the individuals operational and technical knowledge and experience.

Feedback will only be provided if you attend an interview or assessment.

Nationality requirements
Open to UK, Commonwealth and European Economic Area (EEA) and certain non EEA nationals. Further information on whether you are able to apply is available here.

Candidates in their probationary period are eligible to apply for vacancies within this department.

Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles.
The Civil Service embraces diversity and promotes equality of opportunity. There is a guaranteed interview scheme (GIS) for candidates with disabilities who meet the minimum selection criteria.

Apply and further information

Contact point for applicants
For information about the job role please contact Paul Lambert on paul.lambert @ hmrc.gsi.gov.uk or 03000 578247

Sift/interview dates and location
Interviews will take place within 5 weeks of the advert closing date in London or Nottingham.

Further information
Home Moves Assistance not available. Daily Travel Assistance is available only to successful candidates from the redeployment pool. Staff who wish to work an alternative working pattern e.g. part time or part-year are welcome to apply. The preferred working pattern may or may not be available. You should discuss this with the vacancy holder before applying.

Flexible Working Hours are available for these posts. However, candidates should note that this is a dynamic work environment and the successful candidate will be required to have a flexible approach to attendance and may be asked to stay away from home on occasion.

Fraud Investigation Service is committed to making reasonable adjustments to support disabled staff. Should the successful applicant require reasonable adjustments in the new job he/she must discuss and agree these with the vacancy holder who will undertake a workplace assessment, before accepting the job.

Appointment will be conditional upon satisfactory conduct and discipline checks and security vetting. Candidates must live within reasonable daily travel as defined in HR guidance (HR59002).

People commencing employment in the Cyber & Digital Forensics [C&DF] within the Fraud Investigation Service [FIS] must complete a learning programme and demonstrate experience and capabilities.

This learning programme requires jobholders to successfully complete a twelve month Training Assessment Period (TAP), and a determination of the exact requirements will be tailored to the abilities and skills of each applicant. Further details of which will be outlined in successful candidates’ Take Up of Duty letters. The majority of people will successfully complete their TAP but it is important to set out the potential outcomes if the required standards are not achieved. See document attached

Mandatory safety training will be provided and has to be refreshed every six months as a minimum. This training requires an appropriate level of fitness. The level of fitness required equates to completing a warm up routine that is necessary prior to any physical exercise and is not strenuous. Candidates will be required to meet this minimum standard of fitness before their appointment is confirmed in these roles. See attachment for more details.

All applicants will be required to declare any past convictions, criminal findings, or police cautions, regardless of whether they are ‘spent’. You must also declare any disciplinary proceedings relating to previous employments. The disclosure of this information will not automatically disbar you from employment with FIS, but we need to be aware of any event or issue which could impinge on your credibility if questioned in court.

FIS may conduct background checks and any offer will be withdrawn if you fail to disclose any relevant material that causes conflict with you being able to complete the duties of the role.

Candidates are not allowed to bring in notes to interview

In November 2015, HMRC announced the next step in our ten-year modernisation programme to create a tax authority fit for the future, committing to high-quality jobs and the creation of new regional centres serving every region and nation in the UK. We set out our plans to consolidate into 13 large, modern offices, equipped with the digital infrastructure and training facilities needed to build a more highly-skilled workforce.

These offices will be located in Glasgow, Edinburgh, Belfast, Newcastle, Leeds, Liverpool, Manchester, Nottingham, Birmingham, Bristol, Cardiff, Croydon and Stratford.

There will also be a small number of specialist sites, where the work cannot be done anywhere else, in Gartcosh (near Glasgow), Telford, Ipswich, Worthing and Dover, as well as our headquarters in central London. In addition, our Welsh language service has people in specialist roles located in Porthmadog, as well as Cardiff.

If you are recruited into an office that is not one of these locations, you will be expected, subject to HMRC’s applicable policies, to move to one of these locations in the future. In some cases this will be via a transitional site.

If you are not a current civil servant, you will not be eligible for financial assistance for your move to the regional centre or a transitional or specialist site.

If you are a current HMRC employee and you joined HMRC through an advert that was advertised on or after 11/01/2017, you will not be eligible for financial assistance for your move to the regional centre or a transitional or specialist site. This is in line with the terms of your original appointment to HMRC.

For more information please contact the vacancy holder.

Security update
As part of this, successful candidates must pass a disclosure and barring security check. Please note that HMRC have an exemption under the Rehabilitation of Offenders Act 1974, which enables us to make enquiries about both unspent and spent convictions.

If you are successful and transferring from another Government Department, we will carry out a check of your identity, nationality, and immigration status (including the right to work in the UK) and a criminal record check before confirming your appointment

Any move to HM Revenue and Customs (HMRC) will mean you will no longer be able to carry on claiming childcare vouchers.

Customer facing roles in HMRC require the ability to converse at ease with members of the public and provide advice in accurate spoken English and/or Welsh where required. Where this is an essential requirement this will be tested as part of the selection process.

Some of HMRC Terms and Conditions of employment changed on 1st May 2013, these will apply to people who are new recruits to HMRC or who take a new job in HMRC on promotion. The document attached to this advertisement provides more information on the changes we made, please note this is not a full list of HMRC's terms and conditions. If you need to discuss how these changes might affect you, please contact the vacancy holder. For further information on terms and conditions please visit www.gov.uk/government/...nual-leave

If you are currently working for an OGD and would like to consider the impact on your pay when
joining HMRC, please see the attached document "Pay on Transfer from OGD" for further

The pay range minimum is the normal starting salary for those joining HMRC at this grade from
outside the Civil Service. The full pay range is shown as an indicator for existing civil servants at this
grade, and for those who apply on promotion. For further clarification, Civil servants are requested
to read the “Pay on transfer from OGD” document attached. Pay progression is not guaranteed.

A reserve list may be held for a period up to 12 months from which further appointments may be made.

Reasonable adjustment

If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should:

● Contact Government Recruitment Service via hmrcrecruitment.grs @ cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs
● Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional

Applicants who are successful at interview will be, as part of pre-employment screening subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

In order to process applications without delay, we will be sending completed Criminal Disclosure checking forms to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstance some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-Employment.Checks @ cabinetoffice.gov.uk stating the job reference number in the subject heading.

As part of this, successful candidates must pass a disclosure and barring security check. Please note that HMRC have an exemption under the Rehabilitation of Offenders Act 1974, which enables us to make enquiries about both unspent and spent convictions. Appointment to the Civil Service is governed by the Civil Service Commission’s Recruitment Principles. You have the right to complain if you feel a department has breached the requirement of the Recruitment Principles.