Forensic eDiscovery Collection Specialist
About The Position
Schwab is expanding its eDiscovery organization and strengthening its internal ability to preserve and collect electronically stored information across a complex enterprise environment. The Forensic eDiscovery Collection Specialist conducts defensible collections across endpoint, mobile, cloud, email, collaboration, and enterprise data sources while protecting evidentiary integrity, confidentiality, and chain of custody. The specialist helps shape consistent collection standards, documentation practices, and quality controls that support Schwab’s modernized eDiscovery operating model. The role involves addressing technical challenges, making informed decisions when collection risks or source limitations arise, and collaborating with legal partners, business stakeholders, system owners, and service providers. The work supports litigation, regulatory, and downstream eDiscovery workflows by ensuring collected information is complete, accurate, secure, and ready for use. The selected candidate is expected to work on site in the specified location(s).
Requirements
- Bachelor’s degree in Information Technology, Computer Science, or a related field; equivalent relevant work experience may be considered.
- At least two years of experience in eDiscovery, digital forensics, forensic technology, DFIR, information security investigations, enterprise data acquisition, or a related field.
- Strong understanding of eDiscovery processes, including the EDRM, legal holds, retention, records management, and applicable data privacy and protection requirements.
- Hands-on experience conducting defensible collections across endpoint, mobile, cloud, and enterprise data sources using commercially recognized tools such as Relativity, Exterro, WinSCP, Cellebrite, and EnCase.
- Knowledge of chain of custody, evidence handling, hashing, forensic imaging, secure transfer, and collection documentation standards.
- Strong analytical and problem-solving skills, attention to detail, and commitment to data integrity and quality control.
- Ability to manage multiple projects, scope work with legal and technical teams, and meet deadlines.
- Excellent written, verbal, and technical-documentation skills, including the ability to communicate with technical and non-technical stakeholders.
- Professionalism and discretion when handling confidential and legally sensitive information.
Nice To Haves
- Experience in financial services or another highly regulated industry.
- Experience with Microsoft 365, cloud-based collections, or mobile-device collections.
- eDiscovery and/or digital-forensics certification, such as CFCE, EnCE, CEDS, GCFE, or GCFA; highly preferred.
- Experience supporting litigation, regulatory investigations, or enterprise legal matters.
- Knowledge of information governance and records management principles.
- Experience collecting Microsoft 365, cloud collaboration, messaging, and mobile-device data.
- Experience working under the direction of counsel.
Responsibilities
- Conduct defensible preservation and collection of ESI from enterprise systems, email, cloud and collaboration platforms, network locations, and other approved sources.
- Collaborate with business stakeholders and system owners to scope collection efforts and resolve access, retention, and technical-source questions.
- Use approved tools and procedures for forensic imaging, targeted collection, hashing, export, and validation while maintaining chain of custody and evidentiary integrity.
- Maintain evidence inventories, chain-of-custody records, collection notes, scope decisions, methodologies, tools used, validation data, exceptions, and issues encountered.
- Protect collected information from alteration, loss, or corruption and maintain its integrity, security, and confidentiality.
- Perform quality-control checks, validation, and reconciliation to confirm collected data is complete and accurate.
- Securely stage, encrypt, transfer, and reconcile collected data for RelativityOne, downstream eDiscovery workflows, or approved service providers.
- Develop, document, and improve collection methodologies, technical procedures, quality controls, source documentation, and job aids to support repeatability, defensibility, and auditability.
- Stay informed about eDiscovery and digital-forensics technologies and best practices and apply relevant developments to improve collection processes.
- Support declarations, depositions, or testimony regarding collection methods and validity as needed.
- Escalate collection limitations, preservation risks, source gaps, and unexpected findings.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
