Sr. Director, Forensics

Overview

This role oversees digital forensics and collections as one global practice, combining end-to-end delivery, defensible methodology, standardized operating models, and cross-regional staffing across the US, EMEA, and APAC. You will lead a team of examiners and analysts and ensure the practice meets quality, cycle time, and defensibility expectations while expanding forensics-only and consulting revenue.

This is a remote role in the United States (full-time) and reports to the SVP, Operations.

Responsibilities

Run forensics and collections as one team

• Own end-to-end collection delivery across onsite, remote, and cloud collections: scoping, forensic analysis and reporting, chain of custody, and media handling across the US, EMEA, and APAC.
• Operate the practice under one operating model, including shared queues, one set of SOPs and quality standards, and one KPI set for cost per collection event, cycle time, error rate, and utilization.
• Lead the daily rhythm, including job board health, the 2-hour forensic scoping call SLA, weekend and 24/7 coverage rotations, and escalation handling.
• Own defensibility: methodology, chain of custody, documentation, state private investigator licensing compliance, and readiness to provide expert testimony where required.
• Ensure clean handoffs from collection into Digital Analysis and Processing so data lands through one front door with no separate staging.

Lead and develop the team

• Set clear expectations, communicate consistently, recognize strong performance, and build a visible career path for examiners and analysts.
• Develop regional directors and managers to ensure they own their teams’ results, and build succession depth across the practice.
• Own the forensics billable bonus plan and keep it aligned to practice goals.
• Model the practice’s core values: Client is Always in the Room. Own the Outcome. Better Every Day. Deliver Results Together.

Be the client-facing forensics leader

• Serve as senior forensics subject matter expert for clients, Client Success, and Sales, including scoping calls, complex and high-profile matters, escalations, RFP responses, and testimony where required.
• Grow forensics-only and consulting revenue by building a pipeline with Sales for forensics-only accounts, onsite collections, and remote collection engagements.
• Define, price, and launch new offerings including:
  • Remote and self-collection
  • Mobile and chat collections
  • Cloud-native collections from Microsoft 365 and Google Workspace
  • AI-assisted collection workflows
• Represent the practice externally through industry presence, thought leadership, and a clear point of view on what should remain human-led versus AI-assisted in collection.

Systems, tooling, and intake automation

• Own the forensics toolchain and vendor relationships, including Cellebrite, remote collection platforms, analysis tools, and hardware and drive inventory, managed against cost per collection event.
• Serve as the operational owner for collections intake within the Tech-Enabled Platform program by standardizing the remote collection toolchain into one intake path, automating FTP ingestion between PIP and clients, and extending native cloud ingestion.
• Partner with Product and Engineering to specify, test, and adopt automation; evaluate and action technology proposals for remote and self-collection.
• Keep case records, job databases, and timesheets accurate and current to support billing, compliance, and reporting.

Unit economics, utilization, and reporting

• Own billable and non-billable time tracking, utilization by region, and the forensics KPI set (cost per collection event, cycle time, error rate, utilization, and new revenue from remote and AI-assisted offerings).
• Build a cross-regional, follow-the-sun staffing model so work flows to available examiners across the US, EMEA, and APAC, and raise billable utilization across the practice.
• Provide forensics inputs to the weekly and monthly business reviews, including throughput, SLA, quality, utilization, and cost; track improvements in a value capture register with baseline, dollar target, and one owner.
• Own the forensics budget and the 2027 plan covering staffing, tooling, licensing, and margin.

Requirements

• 12+ years in digital forensics, eDiscovery collections, or investigations, with 5+ years leading distributed teams that include managers or directors.
• Deep hands-on expertise in forensic acquisition and analysis, including computer, mobile, cloud (Microsoft 365, Azure, Google Workspace), chat and collaboration platforms, chain of custody, and defensible methodology.
• Certifications such as EnCE, CCE, GCFE, GCFA, or Cellebrite CCO and CCPA.
• Demonstrated client-facing experience, including scoping complex matters with counsel, handling escalations directly, and growing forensics or consulting revenue; expert testimony experience is a strong plus.
• Experience running utilization-based teams, including billable time discipline, cross-regional staffing, and capacity planning.
• Experience uniting regional teams under one operating model and standard, including stepping in as a new leader while keeping strong performers in place afterward.
• Working knowledge of remote and self-collection tooling and cloud-native collection, plus a view on how AI changes collection workflows.
• Commercial and financial fluency, including owning a budget, pricing services, and explaining cost per event and margin to a CFO.
• Direct, warm communication style; comfortable presenting to a general counsel, law firm partner, and a first-year analyst on the same day.
• Bachelor’s degree in computer science, digital forensics, information technology, criminal justice, or a related field, or equivalent experience; advanced degree a plus.
• US-based and eligible to work in the US.
• Ability to travel to client sites and to obtain state private investigator licensing where required.

Preferred Qualifications

• Expert testimony experience.

Compensation & Benefits

• Compensation and benefits details were not provided in the job description.

Location

• Remote (United States)
• Full-time
• Reports to the SVP, Operations