Purpose of Role:
- This role provides accurate, timely, and legally compliant analysis, tracking, and professional feedback on information and evidence requested by the Law Enforcement Agencies (LEAs), regulatory bodies, investigative authorities, and other lawful requestors, within agreed service levels and court‑mandated timeframes. This role further supports RICA compliance through robust biometric verification governance, secure data handling, and effective sound stakeholder advisory.
Key Responsibilities
Management of Law Enforcement Agency Requests
- Document and register all requests in accordance with approved Forensic Services processes, procedures and standards
- Acknowledge, respond and approve LEAs, Regulatory Bodies, investigative authorities, and internal queries within one working day in writing
- Analyse, complete, and finalise allocated, and approve requests within agreed or prescribed time frames.
- Mange and provide requested data to SAPS and other agencies within the pre‑agreed schedule
- coordinate and provide archived data within the pre‑agreed time period as discussed and agreed with management
- Provide and assist business units with call detail requests in line with company policy
- Ensure after‑hours requests are actioned timeously.
- Ensure information is submitted in the agreed format/template and guidelines
- Assist with implementation of quality assurance procedures of Interception
Interception and Monitoring Requests
- Analyse, document, register and approve all interception and monitoring requests per approved Forensic Services processes and procedures
- Acknowledge receipt of all interception and monitoring requests in writing
- Complete allocated requests within agreed or prescribed timelines, including instructions received from the Office of Interception (OIC) as per warrants
- Support data provided by supplying proof of factual information when questioned
- Report any access‑control breakdowns in the LIMS office to management
- Assist with management of the Legal Interception and Monitoring System (LIMS) and perform regular backups
- Provide feedback to management on issues and matters pertaining to the LIMS system
- Ensure after‑hours requests are processed when received
Biometric Compliance, Verification & Governance
- Verify and manually authenticate customer biometric data in line with RICA legislation and internal compliance frameworks
- Conduct integrity and fraud‑risk checks on biometric submissions, escalating suspicious or non‑compliant cases
- Ensure all biometric verification activities are logged, documented, and traceable for audit and regulatory purposes
- Process biometric verification requests within required SLA timelines to maintain compliance and operational efficiency
- Validate customer identity information against approved internal systems and escalate discrepancies according to procedure
- Maintain secure handling, storage, and confidentiality of biometric and identity‑related data
- Provide compliance feedback and exception reporting to relevant business units
- Identify gaps, trends, or risks in biometric verification processes and recommend improvements
- Assist in the review and enhancement of biometric verification controls, SOPs, and governance frameworks
Expert Advisory & Stakeholder Support
- Provide expert guidance to internal stakeholders on RICA compliance, biometric authentication requirements, LEA requests, and evidentiary standards
- Advise on complex data‑provision and interception matters to ensure alignment with legal and regulatory obligations
- Partner with Legal, Risk, Fraud, and Forensics to interpret legislation and strengthen internal policies and controls
- Contribute to pre‑trial preparation and consultations, ensuring evidentiary readiness and clarity of submissions
Equipment Identity Register (EIR – TransUnion)
- Process and quality check bulk whitelist/blacklist IMEI submissions, ensuring correct formatting, validated IMEI integrity, and accurate batch uploads
- Liaise with TransUnion and internal stakeholders to resolve EIR related issues, ensure SLA compliance, and improve device identity governance processes
System Management (LIMS, e-RICA & Biometric Tools)
- Support day‑to‑day operation, maintenance, and user support for LIMS, e‑RICA platforms, biometric verification tools, and EIR portals
- Perform/assist with system backups, access reviews, and routine control checks to ensure integrity and availability
- Identify system issues, data anomalies, or access‑control concerns and escalate to technical owners
- Document system requirements and contribute to enhancement roadmaps to improve compliance effectiveness
- Assist with testing and validating system changes to ensure alignment with investigative and compliance needs
Document Maintenance and Reporting
- Complete and sign affidavits as per analytical findings
- Generate and maintain monthly feedback reports
- Provide monthly reports on all enquiries, requests, and archived requests received
- Ensure accurate daily keeping and version control of case files and submissions
- Assist with generation of RICA compliance, exception, and validation statistics as required
Projects and Enhancements
- Participate in compliance, forensic, and technology projects including new e‑RICA integrations and process improvements
- Conduct readiness assessments and contribute SME input to project documentation and change impacts
- Support pilot testing, user training, and rollout activities to embed enhancements effectively
- Track and report on project actions, risks, and outcomes relevant to LEA support and RICA compliance
Court Appearance and Expert Support
- Prepare and attend pre‑trial conferences
- Represent the company in court as an expert witness with a high professional standard
- Ensure all evidence and documentation meet legal and evidentiary requirements
Perform any other related duties as requested by Management
- Assist with ad hoc reviews, forensic investigations, and other tasks as requested by management
- Ensure the standby MSISDN is always allocated and answered for LEA after‑hours requests
Minimum Qualifications
- Degree in Law (Criminal Justice) and/or Data Analytics is preferable
- Relevant qualification in IT, Telecommunications, or Network Engineering, with basic understanding of mobile network architecture (including RAN, cell sites, and coverage) will be advantageous
Experience
- Minimum of 5 years’ accumulated experience in telecom, analytics, court experiences, documentation of legal legislative matters for court records.
- Police Experience (2 years) could be advantageous.
- Demonstrated ability to effectively communicate verbally, as well as in writing. This includes demonstrated report writing skills.
- Ability to develop new solutions is preferable
- Own transport
- Demonstrated ability to work and deliver under pressure and within strict time frames
- Demonstrated ability to work in a team environment
Special Requirements:
- Credentials such as Certified Fraud Examiner, or other similar certification (Membership to the ICFP – Institute of Commercial Forensic practitioners) and ACFE (Association of Certified Fraud Examiners) will advantageous
- NIA (National Intelligence Agency) clearance certificate or willingness to go through process of obtaining a NIA clearance certificate is a requirement
go to method of application »
Purpose of Role:
- This role lead and modernise Cell C’s forensic‑technology capabilities by driving AI‑enabled cybercrime analytics, forensic data science, telecom‑fraud risk modelling, advanced data analytics and digital‑evidence excellence. It partners with internal stakeholders, regulators, law enforcement agencies, and external forensic specialists to safeguard the organisation’s digital ecosystem and data assets. It focuses on identification, mining, analysis, correlation and prediction of fraud and cybercrime patterns through data‑driven intelligence, while maintaining industry‑aligned forensic practices, systems and governance.
- This role enables proactive fraud‑risk management, enhanced cyber‑resilience, and the continuous upliftment of Cell C’s forensic‑technology capabilities. It requires high levels of independent technical judgement, advanced analytical reasoning, and the ability to architect and integrate enterprise‑wide forensic‑analytics systems. A key component of the role is strengthening proactive fraud‑risk management through data-driven insights, behavioural analytics, and intelligence-led investigation support to both the investigations unit as well as LEA Support Services
Key Responsibilities
Cybercrime Data Analytics & Threat Modelling
- Develop and maintain AI‑driven detection and monitoring models identifying fraud, cybercrime indicators and behavioural anomalies
- Design analytics‑based early‑warning systems leveraging telecom, network, identity, and access‑control data sources
- Conduct trend analysis, correlation modelling, and anomaly detection to surface emerging cyber‑risk patterns
- Build predictive models to forecast cybercrime exposure, threat emergence and systemic vulnerabilities
Digital‑Evidence Data Governance & Case Intelligence Support
- Manage digital‑evidence metadata repositories ensuring completeness, usability and compliance with governance standards
- Oversee data lineage, integrity, classification and readiness for analytical exploitation
- Integrate logs, telemetry, metadata, structured and unstructured datasets into analytics frameworks
- Automate evidence‑correlation, pattern recognition and metadata‑enrichment processes
Forensic Database Development, Data Science & Analytics Systems Management
- Design and govern forensic analytics repositories and data lakes, including FMS, CFAS, LEA, GIS, EIR and supporting environments
- Conduct data mining, clustering, predictive modelling, entity‑resolution and link‑analysis exercises
- Build scalable data pipelines integrating telecom, billing, CRM, security and customer datasets for analytics
- Develop SQL models, dashboards, automation scripts and real‑time anomaly‑detection engines
- Ensure data integrity, accuracy, security and governance across all forensic data ecosystems
- Manage analytical and forensic‑technology projects, including AI model deployment, data‑engineering improvements and automation initiatives
- Manage complex delivery dependencies, risks, stakeholder communication and vendor relationships.
- Ensure alignment between analytics initiatives and Cell C’s broader fraud‑risk, cybercrime and technology strategies
Forensic Technology Management
- Implement, optimise and maintain forensic analytics platforms, AI engines and cyber analytics dashboards
- Evaluate emerging technologies in AI, machine learning, data engineering and telemetry processing
- Integrate forensic‑analytics capabilities with SSOC, IT Security, Networks and enterprise monitoring systems
- Design automation and orchestration solutions to enhance insight generation and reduce manual processing within forensic services function
Analytics‑Driven Forensic Systems Architecture & Maintenance
- Architect forensic‑technology, analytics and cyber‑intelligence systems enabling enterprise fraud‑risk modelling
- Design analytics‑ready data architectures, governance models and secure access‑control structures
- Maintain and optimise case‑intelligence, logging and forensic‑analytics platforms
- Drive automation, interoperability and continuous enhancement of analytic tooling
Analytics‑Driven Reporting & Insight Delivery
- Lead and build advanced analytics reports, dashboards and intelligence briefings for executives and governance stakeholders
- Translate complex datasets into actionable insights, predictive indicators and strategic recommendations
- Communicate emerging fraud‑trends, behavioural anomalies and systemic control vulnerabilities to inform proactive solutions and continuous improvement
Minimum Qualifications
- Degree in Data Science, Digital Forensics, Cybercrime, Computer Science, IT, Information Security or a related discipline
- Certifications in AI/ML, data engineering, SQL analytics, telemetry analysis or digital‑forensics technologies are advantageous
- Credentials such as Certified Fraud Examiner, or other similar certification, preferred (Membership to the ICFP – Institute of Commercial Forensic Practitioners) and ACFE (Association of Certified Fraud Examiners)
Experience
- 8 – 9 years of progressive experience in analytics‑centric forensic environments, cyber‑data science, fraud‑risk analytics or related disciplines
- Demonstrated ability to design and govern analytics platforms, data pipelines, predictive models and forensic‑data ecosystems
- Experience collaborating with cross‑functional technical domains such as Networks, IT Security, Cyber Defence and Risk
- Solid understanding of telecommunications systems, OSS/BSS, CDRs, signalling protocols, and network logs
go to method of application »