Technical Expert - eDiscovery

Roche•Indianapolis, IN

19h

About The Position

At Roche, we foster a culture where individuality is embraced, and personal expression, open dialogue, and genuine connections are encouraged. We value, accept, and respect everyone for who they are, enabling personal and professional growth. Our mission is to prevent, stop, and cure diseases and ensure universal access to healthcare. We are seeking a highly skilled Technical Expert with eDiscovery expertise to join our Roche Digital Technology (RDT) Group Functions eDiscovery and Forensics team. This role serves as the primary technical liaison between the RDT infrastructure team and Business Product Owners in Legal and Compliance, focusing on the technical aspects of eDiscovery and privacy processes. The specialization includes Microsoft Purview eDiscovery (Premium) and ensuring the defensible identification, collection, and preservation of electronically stored information (ESI) across various corporate systems and hardware, with a particular emphasis on Apple mobile ecosystems and mixed-OS laptop environments (macOS and Windows). The opportunity involves acting as a subject matter expert to ensure legally defensible and forensically sound data acquisition, maintaining a strict chain of custody for litigation, internal investigations, and regulatory requests, while proactively driving prioritized projects aligned with business needs.

Requirements

Bachelor's degree in Information Technology, Computer Science, or a related field.
5+ years of experience in eDiscovery, digital forensics, or specialized IT incident response, preferably within highly regulated industries such as Pharmaceuticals, Healthcare, or Finance.
Proven expertise in collecting ESI from iOS devices (iPhones/iPads) and macOS environments.
Deep understanding of Apple’s file systems (APFS), encryption (FileVault), and Mobile Device Management (MDM) interactions.
Strong working knowledge of Windows 10/11 environments, NTFS, BitLocker encryption, and remote collection methodologies.
Hands-on experience with mobile and computer forensic data collection software (e.g., Cellebrite UFED/Physical Analyzer, Druva, Cellebrite Digital Collector/MacQuisition, EnCase, etc.).
Prior discovery and/or privacy experience with a deep understanding of relevant national and international regulations, including EDRM lifecycle, legal holds, data privacy regulations (e.g., GDPR, CCPA), and the principles of forensic soundness.
Experience effectively and proactively coordinating multiple functional areas and stakeholders, with the ability to handle multiple priorities and projects simultaneously with a high degree of accuracy and professionalism.
Exceptional ability to maintain a positive, constructive attitude in ambiguous situations, manage complexity and high pressure productively, and utilize interpersonal skills to inspire trust with business stakeholders, and communicate highly technical concepts to non-technical stakeholders, particularly legal counsels, forensic experts and HR partners.

Nice To Haves

Relevant industry certifications: CFCE, CCE, EnCE, CCME, or GIAC Certified Forensic Examiner (GCFE/GCFA).
RCA certification (RelativityOne).
Experience with enterprise eDiscovery platforms (e.g., Purview, Relativity, Exterro).
Familiarity with cloud data collections (Google Workspace, Microsoft 365, Slack).
Deep experience designing, building, and utilizing legally-defensible workflows in enterprise eDiscovery platforms, including Microsoft Purview (Premium/Advanced) as a primary SME, and Relativity, alongside familiarity with cloud data preservation collections across Google Workspace and Slack.
Proficiency in PowerShell for advanced search and reporting, experience with GenAI prompt writing for eDiscovery, Agentic AI, and data modeling.
Strong problem-solving skills required to resolve complex technical issues, coupled with an Agile mindset that focuses on "Reuse before Buy before Make" and enabling a diverse group of partners to speak with a single voice.

Responsibilities

Plan defensible procedures for and execute forensic imaging, end-to-end eDiscovery workflows in Microsoft Purview, and electronic data preservation and collection from company systems and corporate devices, helping to identify, preserve, and retrieve case-critical data globally, specifically focusing on Apple iPhones, iPads, MacBooks, and Windows-based laptops.
Recommend and execute data processing in Relativity and Purview Premium, preparing the data for Legal review by utilizing Boolean searching, culling, and TAR (Technology-Assisted Review) / AI (Artificial Intelligence), preparing productions, and making process and technology recommendations to efficiently and effectively achieve set outcomes.
Act as a trusted IT liaison to internal and external counsel, translating complex technical concepts into clear legal realities and assisting the Legal and Compliance team in scoping preservation and collection efforts based on litigation holds.
Develop and maintain trusting relationships with legal stakeholders, IT, and external parties.
Handle day-to-day operations by accurately responding to time-sensitive requests.
Develop and maintain Standard Operating Procedures (SOPs) for electronic data collections from a wide range of company systems, as well as remote and physical device acquisitions, including the secure storage and retirement of physical evidence.
Coordinate the logistics of remote and physical device acquisitions.
Manage the intake, secure storage, and return/retirement of physical evidence.
Generate and maintain meticulous documentation for all preservation, collection, processing, and production activities, ensuring a verifiable chain of custody and adherence to the Electronic Discovery Reference Model (EDRM).
Organize, log, and maintain accurate internal metrics and process flows so they can be repeated with consistency.
Utilize, update, troubleshoot, and manage the lifecycle of industry-standard forensic and eDiscovery collection tools (e.g., Cellebrite, Druva, EnCase, FTK).
Manage the lifecycle of these solutions.
Continuously evaluate and refine collection workflows to account for new OS updates (iOS, macOS, Windows 11) and emerging security features (e.g., FileVault, BitLocker, MDM profiles).
Proactively deploy workflow automation/AI improvements.
Contribute to the continuous improvement of legal and compliance data services.
Proactively develop and maintain strong, trusting business relationships with key legal and compliance stakeholders, RDT, and other internal or external partners.
Act as a trusted liaison to legal and compliance teams (e.g. eDiscovery and Internal Investigations) by exhibiting exceptional communication skills to translate complex technical concepts into clear legal realities for legal and compliance teams and non-technical stakeholders.