Manager, eDiscovery and Forensics
Pleasanton, CA

Job Description

As a part of our technology organization, you will have the opportunity to build next generation solutions that will transform the way our customers interact with our family of iconic brands. Our team employs a DevOps model, allowing our product teams to have full ownership of design, build and operate with immense scale. From distributed computing, to artificial intelligence, mobile, big data and cloud computing, you will have the opportunity to build a career that allows you to make an impact all while learning new technical and leadership skills. We are inspired by new challenges and push ourselves to create what's next in this dynamic industry. Come join this diverse team and 0grow with us.

The eDiscovery and Forensics Manager works as an individual contributor within Gap's Information Security organization (InfoSec), working closely with legal, infrastructure, application, and managed service provider teams to support litigation service requests, manage enterprise email protection and Report phish programs, deliver malware analysis services, and deliver forensics investigations services including Incident Response, and Corporate Security, Loss Prevention, Employee Relations, Privacy and Global Integrity driven investigations. The eDiscovery and Forensics Manager is also responsible for being current on emerging technologies and providing vision for needed updates in infrastructure, hardware and software changes, and policies and procedures.

* Participate in incident response forensic analysis, and investigations of suspected information technology security misuse or compliance reviews as requested by Gap's Security Council, or InfoSec leadership, when alerts are received from threat monitoring tools and threat intelligence sources
* Work with critical business partners, and assist in responses to internal and external compliance audits, e-Discovery data collections/processing, and corporate investigations
* Monitor current and proposed laws, regulations, industry standards, and ethical requirements related to information security and privacy
* 3-5 years' experience with EDRM lifecycle, endpoint forensic analysis, data protection, and multiple operating systems (Windows, UNIX, Linux, etc.)
* Experience and understanding of retention protocols, case management, forensic methodology, online review platforms, and metrics reporting
* Experience with managing complex litigation requests, coordinating with outside counsel or review vendors, and eDiscovery/Forensics/DLP program management
* Experience working with EnCase, Access Data, and other industry standard eDiscovery/forensic software
* Understanding of the Payment Card Industry (PCI) data security standards (PCI DSS) and the payment application data security standards (PA DSS) as well as experience in the implementation of controls to mitigate PCI issues
* Experience with multi-national large-scale enterprises
* Desired Certifications: ACE, CCFP, CEDS, CFE, EnCE, EnCEP, GCFA, GCF