Lead Cybersecurity - eDiscovery Collection and Preservation Specialist

Job Title: Lead Cybersecurity - eDiscovery Collection and Preservation Specialist Remote Duration : 6months Note: ** This role is critical for organizations technical guidance and assistance, especially in network and security design, implementation, and technical research. Support includes helping integrate equipment from various vendors for seamless operations. Job Description: Lead Cybersecurity - eDiscovery Collection and Preservation Specialist Responsibilities: The Team The Digital Forensics and eDiscovery team is a specialized group of experts dedicated to supporting the company's legal and compliance objectives through meticulous digital evidence collection, preservation, and analysis. This team ensures digital investigations meet the highest standards of integrity, accuracy, and legal defensibility. Working at the intersection of technology and law, the team collaborates closely with in-house and outside legal counsel, compliance officers, and external partners to provide critical forensic insights for litigation, regulatory inquiries, and internal investigations. Their work includes recovering and analysing electronic data in a manner that supports the chain of custody requirements and meets strict evidentiary standards. The Digital Forensics and eDiscovery team combines deep technical expertise with a comprehensive understanding of legal processes, enabling the company to navigate complex digital investigations with confidence and uphold compliance in an evolving regulatory landscape. Position Overview: We are seeking a highly skilled eDiscovery Data Collection and Preservation expert to aid our internal data identification, preservation, and collection efforts. Operating within our Global Cybersecurity team, you will be a subject matter expert for Microsoft Purview eDiscovery (Premium). You will ensure that all electronically stored information (ESI) is handled in a legally defensible and efficient manner across the enterprise. Key Responsibilities: Purview Case Management: Lead the end-to-end eDiscovery workflow in Microsoft Purview, including creating cases, managing custodians, and executing complex KQL search queries. Defensible Collection: Execute in-place collections for Exchange, SharePoint, OneDrive, and Microsoft Teams, ensuring data integrity and maintaining meticulous chain-of-custody documentation. Legal Hold Administration: Manage and monitor automated legal holds to ensure "preservation in place " is active for all relevant custodians. Advanced Data Processing: Utilize Premium features such as Conversation Threading for Teams and Email. Familiarity with handling Cloud Attachments (linking shared documents to their original versions) is crucial. Data Reduction: Document indexing, Boolean searching, exposure to TAR and AI for relevance review, and other methods utilized to reduce the volume of non-relevant data. Process Optimization: Develop and maintain Standard Operating Procedures (SOPs) and documentation for eDiscovery collections that align with current 2026 legal standards and internal compliance policies. Cross-Functional Collaboration: Partner with in-house Legal, IT, Outside Counsel and other groups to troubleshoot collection issues and manage outbound data transfers to external review platforms (e.g., Relativity). Required Qualifications: Experience: 5+ years of eDiscovery experience, with at least 3 years of hands-on expertise in Microsoft Purview (Premium/Advanced eDiscovery). Technical Proficiency: Mastery of Microsoft 365 environments. Scripting and Programming: Knowledge of PowerShell for advanced search and reporting, Object Oriented programming, GenAI prompt writing, and Agentic AI are highly desired. Education: Bachelor's degree in Information Technology, Computer Science, or a related field. Certification: Digital Forensics certification, Certified eDiscovery Specialist (CEDS), or Paralegal Certificate is highly preferred. Technical Skills for 2026: Familiarity with the Electronic Discovery Reference Model (EDRM). Ability to manage soft deleted OneDrive accounts, inactive Mailboxes, and legacy data within the Purview boundary.** Apply tot his job Apply To this Job