Grey Street Consulting, LLC
OCC eDiscovery Forensic Analyst
Grey Street Consulting, LLC, Washington, District of Columbia, us, 20022
All Jobs > OCC eDiscovery Forensic Analyst
Fully Remote • The Office of the Comptroller of the Currency
Grey Street Consulting, LLC (Grey Street), a leading small business provider of operational support services to Federal civilian and defense agencies, is seeking to hire an eDiscovery Forensic Analyst to support our prospective client within The Office of the Comptroller of the Currency (OCC). This position is to be performed remotely.
Essential Duties and Responsibilities eDiscovery Identification Services
Must be able to review the current ESI Data Map, which identifies each ESI IT system, the purpose of the system, system owner, status (active or legacy), relevant location (network, system directory), and data and metadata types (documents, images, video). The ESI data map will be the first step in OCC identification efforts and allows OCC staff or contractor staff to answer discovery questions about IT systems. For planning purposes, the ESI data map will provide details for the following sources of ESI, however the OCC may identify other sources as necessary.
Must be able to work with IT staff and various business units within the OCC to determine which sources of ESI may be relevant or responsive to a particular legal matter.
For planning purposes, there may be an estimated 15-20 new cases, annually.
Each case may involve searching all OCC systems and/or sources of ESI but typically involve one to three sources.
eDiscovery Preservation Services
Must be able to work with Chief Counsel’s office staff, IT system owners, and the CCISG to preserve ESI and hard copy documents following OCC preservation policy.
Coordinating with assisting with disseminating ESI preservation requests using clear instructions and procedures if necessary.
Assist CCISG with adhering to preservation instructions for OCC technology including MS SharePoint, custodian hard drives, departed custodian hard drives, external media, network drives, MS Outlook, OCC computers, backup tapes, cellular/smart phones, cloud storage or other sources of ESI when necessary.
Collect-to-preserve highly relevant ESI or technically precarious data, such as from mobile devices, hard drives, network shares or websites.
eDiscovery Collection Services
Must be able to assist the OCC with gathering potentially discoverable ESI and its metadata in a manner that is timely, legally defensible, auditable, efficient, proportionate to the matter, and targeted across various platforms. Must be able to coordinate the collection of ESI and:
Assist in the scoping of collection efforts, tracking the progress of a collection, and assigning the appropriate resources to a collection effort.
Work with legal staff and ITS Resources to suggest collection search criteria, filters, and tags.
Ensure that all ESI collected is logged and tracked appropriately. In addition, audit records associated with the collection are to be maintained for the full records retention period associated with the matter.
Work with technical resources to resolve issues/questions during collection and to ensure that the appropriate ESI collection processes are being followed.
Manage storage by creating, documenting, and cataloging network file shares to support automated and manual collection efforts.
Coordinate with the OCC eDiscovery COR and ITS resources to identify data that the agency is not required to maintain for records or other purposes.
Must be able to maintain detailed logging and audit trails to track user activity and system events that align with the OMB Memorandum M 21-31 logging directive.
Task Scheduling and Reporting
Must be responsible for developing and maintaining an integrated master schedule (IMS) detailing the activities required to execute the tasks.
The IMS must be in MS Project format and must identify tasks with concise names, duration of task, planned start/end dates, actual start/end dates, task predecessors and successors, task dependencies, and resources.
The IMS must be baselined and updated monthly to make schedule adjustments and must account for both new legal matters and active legal matters.
Must be able to detail activities in the IMS for identifying, preserving, and collecting hard copy documents and ESI.
For identification, preservation, and collection activities, must be able to manage each effort in the IMS from start to finish to ensure on-time execution.
Must be able to maintain the IMS in a central Microsoft SharePoint location, under configuration control, and accessible to the COR and ITS.
Using IMS, must generate a monthly status report that summarizes completed activities for the month and planned activities for the following month.
The monthly status report must communicate impediments to ITS staff and the OCC eDiscovery COR, and suggest plans for OCC resolution.
For planning purposes, it is estimated that you will historically manage approximately 15-20 new cases annually.
Job Requirements and Experience
Minimum 2 years of experience in an eDiscovery role (Required)
Using mobile forensic tools (i.e. Cellebrite UFED/PA, GrayKey, Oxygen Forensics, Magnet AXIOM, etc.) to perform forensic imaging and analysis from mobile devices. (Required)
Experience with hard drive imaging and targeted data extraction, using such tools as Encase, FTK Imager, etc., using proper acquisition protocols, including use of write blockers and chain-of-custody procedures. (Required)
Experience with collaboration and messaging platform data, such as Microsoft Teams, Skype, and Slack. Experience reviewing, normalizing, and converting exported data files (CSV, JSON, or HTML) for ingestion of such formats into eDiscovery and review platforms, using tools such as Message Crawler. (Required)
Experience with preparing detailed technical reports for use in investigations, administrative proceedings and court. Required)
An active Computer Forensics Examiner certification (such as Cellebrite CCO/CCPA, EnCE, GCFE, CCE, or CFCE.). (Preferred)
Experience with handling case management tasks, including oversight of case data and ESI preservation. (Preferred)
Experience with using Litigation Holds software. (Preferred)
Experience with using preservation tools such as Microsoft Purview. (Preferred)
Experience with collecting and preserving data from network file shares, using industry standard tools and techniques. (Preferred)
Experience with cloud data acquisitions from services such as Microsoft 365. (Preferred)
ADA Requirements
Operate a PC and phone in an office environment.
Work in a primarily sedentary position.
Perform some bending, light lifting, and carrying of equipment may be required.
Any additional office equipment that is required by the position.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected Veteran status.
About The Office of the Comptroller of the Currency (OCC) The Office of the Comptroller of the Currency (OCC) is an independent bureau within the U.S. Department of the Treasury that operates without appropriations. It is responsible for chartering, regulating, and supervising national banks, federal savings associations, and federal branches and agencies of foreign banks. The OCC is headquartered in Washington, DC, with district offices in New York, Chicago, Dallas, and Denver, as well as smaller offices nationwide. The agency’s primary focus is bank supervision.
The Chief Counsel’s Office (CCO) at the OCC oversees four main legal practice areas, including the Litigation and Enforcement groups. These groups, along with attorneys from other practice areas as needed, rely on electronic discovery (eDiscovery) systems and services to support various legal activities. These activities include responding to subpoenas, Congressional requests, OCC investigations, administrative enforcement proceedings, civil litigation, and public rulemaking notices. The OCC's legal team comprises around 160 attorneys and 17 support staff, with approximately 50 attorneys in the Litigation and Enforcement groups regularly using eDiscovery tools in their work.
About Grey Street Consulting, LLC Grey Street is a small, federal contracting firm. Founded in 2015, Grey Street has already established itself as a leading small business provider of federal human resources (HR) services. Grey Street provides staff augmentation support to numerous federal agencies including but not limited to the U.S. Departments of Transportation (DOT), Health and Human Services (HHS), Energy (DOE), Labor (DOL), and Homeland Security (DHS) just to name a few. Our approach to the delivery of professional services is rooted in our deep subject matter expertise and supported by our ability to effectively manage our client’s needs and expectations while delivering measurable results.
Grey Street offers a robust benefit package which includes comprehensive medical, dental, and 401k with a guaranteed match!!
To learn more about Grey Street click here: https://greystreet-consulting.com/
#J-18808-Ljbffr
Fully Remote • The Office of the Comptroller of the Currency
Grey Street Consulting, LLC (Grey Street), a leading small business provider of operational support services to Federal civilian and defense agencies, is seeking to hire an eDiscovery Forensic Analyst to support our prospective client within The Office of the Comptroller of the Currency (OCC). This position is to be performed remotely.
Essential Duties and Responsibilities eDiscovery Identification Services
Must be able to review the current ESI Data Map, which identifies each ESI IT system, the purpose of the system, system owner, status (active or legacy), relevant location (network, system directory), and data and metadata types (documents, images, video). The ESI data map will be the first step in OCC identification efforts and allows OCC staff or contractor staff to answer discovery questions about IT systems. For planning purposes, the ESI data map will provide details for the following sources of ESI, however the OCC may identify other sources as necessary.
Must be able to work with IT staff and various business units within the OCC to determine which sources of ESI may be relevant or responsive to a particular legal matter.
For planning purposes, there may be an estimated 15-20 new cases, annually.
Each case may involve searching all OCC systems and/or sources of ESI but typically involve one to three sources.
eDiscovery Preservation Services
Must be able to work with Chief Counsel’s office staff, IT system owners, and the CCISG to preserve ESI and hard copy documents following OCC preservation policy.
Coordinating with assisting with disseminating ESI preservation requests using clear instructions and procedures if necessary.
Assist CCISG with adhering to preservation instructions for OCC technology including MS SharePoint, custodian hard drives, departed custodian hard drives, external media, network drives, MS Outlook, OCC computers, backup tapes, cellular/smart phones, cloud storage or other sources of ESI when necessary.
Collect-to-preserve highly relevant ESI or technically precarious data, such as from mobile devices, hard drives, network shares or websites.
eDiscovery Collection Services
Must be able to assist the OCC with gathering potentially discoverable ESI and its metadata in a manner that is timely, legally defensible, auditable, efficient, proportionate to the matter, and targeted across various platforms. Must be able to coordinate the collection of ESI and:
Assist in the scoping of collection efforts, tracking the progress of a collection, and assigning the appropriate resources to a collection effort.
Work with legal staff and ITS Resources to suggest collection search criteria, filters, and tags.
Ensure that all ESI collected is logged and tracked appropriately. In addition, audit records associated with the collection are to be maintained for the full records retention period associated with the matter.
Work with technical resources to resolve issues/questions during collection and to ensure that the appropriate ESI collection processes are being followed.
Manage storage by creating, documenting, and cataloging network file shares to support automated and manual collection efforts.
Coordinate with the OCC eDiscovery COR and ITS resources to identify data that the agency is not required to maintain for records or other purposes.
Must be able to maintain detailed logging and audit trails to track user activity and system events that align with the OMB Memorandum M 21-31 logging directive.
Task Scheduling and Reporting
Must be responsible for developing and maintaining an integrated master schedule (IMS) detailing the activities required to execute the tasks.
The IMS must be in MS Project format and must identify tasks with concise names, duration of task, planned start/end dates, actual start/end dates, task predecessors and successors, task dependencies, and resources.
The IMS must be baselined and updated monthly to make schedule adjustments and must account for both new legal matters and active legal matters.
Must be able to detail activities in the IMS for identifying, preserving, and collecting hard copy documents and ESI.
For identification, preservation, and collection activities, must be able to manage each effort in the IMS from start to finish to ensure on-time execution.
Must be able to maintain the IMS in a central Microsoft SharePoint location, under configuration control, and accessible to the COR and ITS.
Using IMS, must generate a monthly status report that summarizes completed activities for the month and planned activities for the following month.
The monthly status report must communicate impediments to ITS staff and the OCC eDiscovery COR, and suggest plans for OCC resolution.
For planning purposes, it is estimated that you will historically manage approximately 15-20 new cases annually.
Job Requirements and Experience
Minimum 2 years of experience in an eDiscovery role (Required)
Using mobile forensic tools (i.e. Cellebrite UFED/PA, GrayKey, Oxygen Forensics, Magnet AXIOM, etc.) to perform forensic imaging and analysis from mobile devices. (Required)
Experience with hard drive imaging and targeted data extraction, using such tools as Encase, FTK Imager, etc., using proper acquisition protocols, including use of write blockers and chain-of-custody procedures. (Required)
Experience with collaboration and messaging platform data, such as Microsoft Teams, Skype, and Slack. Experience reviewing, normalizing, and converting exported data files (CSV, JSON, or HTML) for ingestion of such formats into eDiscovery and review platforms, using tools such as Message Crawler. (Required)
Experience with preparing detailed technical reports for use in investigations, administrative proceedings and court. Required)
An active Computer Forensics Examiner certification (such as Cellebrite CCO/CCPA, EnCE, GCFE, CCE, or CFCE.). (Preferred)
Experience with handling case management tasks, including oversight of case data and ESI preservation. (Preferred)
Experience with using Litigation Holds software. (Preferred)
Experience with using preservation tools such as Microsoft Purview. (Preferred)
Experience with collecting and preserving data from network file shares, using industry standard tools and techniques. (Preferred)
Experience with cloud data acquisitions from services such as Microsoft 365. (Preferred)
ADA Requirements
Operate a PC and phone in an office environment.
Work in a primarily sedentary position.
Perform some bending, light lifting, and carrying of equipment may be required.
Any additional office equipment that is required by the position.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected Veteran status.
About The Office of the Comptroller of the Currency (OCC) The Office of the Comptroller of the Currency (OCC) is an independent bureau within the U.S. Department of the Treasury that operates without appropriations. It is responsible for chartering, regulating, and supervising national banks, federal savings associations, and federal branches and agencies of foreign banks. The OCC is headquartered in Washington, DC, with district offices in New York, Chicago, Dallas, and Denver, as well as smaller offices nationwide. The agency’s primary focus is bank supervision.
The Chief Counsel’s Office (CCO) at the OCC oversees four main legal practice areas, including the Litigation and Enforcement groups. These groups, along with attorneys from other practice areas as needed, rely on electronic discovery (eDiscovery) systems and services to support various legal activities. These activities include responding to subpoenas, Congressional requests, OCC investigations, administrative enforcement proceedings, civil litigation, and public rulemaking notices. The OCC's legal team comprises around 160 attorneys and 17 support staff, with approximately 50 attorneys in the Litigation and Enforcement groups regularly using eDiscovery tools in their work.
About Grey Street Consulting, LLC Grey Street is a small, federal contracting firm. Founded in 2015, Grey Street has already established itself as a leading small business provider of federal human resources (HR) services. Grey Street provides staff augmentation support to numerous federal agencies including but not limited to the U.S. Departments of Transportation (DOT), Health and Human Services (HHS), Energy (DOE), Labor (DOL), and Homeland Security (DHS) just to name a few. Our approach to the delivery of professional services is rooted in our deep subject matter expertise and supported by our ability to effectively manage our client’s needs and expectations while delivering measurable results.
Grey Street offers a robust benefit package which includes comprehensive medical, dental, and 401k with a guaranteed match!!
To learn more about Grey Street click here: https://greystreet-consulting.com/
#J-18808-Ljbffr