Digital Forensics Operations Officer
Job summary
The NHS Counter Fraud Authority (NHSCFA) is the national body responsible for all matters relating to the prevention, detection and investigation of economic crime across the NHS. Further information about our work and annual plan for delivering this is available on our website.
This hybrid postwill work as part of the NHS Counter Fraud AuthorityDigital Forensics Unit (in Newcastle), within the Operations function , whose responsibility is to investigate allegations of fraud, bribery and corruption in the NHS.
This role will support NHSCFA and NHS counter fraud partners, including NHS England, Department of Health and Social Care Anti-Fraud Unit (DHSC AFU), Counter Fraud Services (CFS) Wales, Counter Fraud Services (CFS) Scotland, Local Counter Fraud Specialists (LCFS') and any other contracted external customers by performing technical and quality processes to maintain service efficiency and ensure maintenance of the units' accreditation.
Potential applicants can contact Chris.atkinson@nhscfa.gov.uk , DFU Leadfor an informal chat if you have any questions regarding the role.
Our vacancies are popular and we may close this vacancy earlyshould we receive a significant number of applications.
Interviews will be held at our Citygate, Newcastle office on 14th or 15th May 2026.
Main duties of the job
Provide operational support to the Digital Forensics Unit (DFU), including coordinating day-to-day administrative and technical tasks as directed by the Digital Forensics Lead.
Maintain accurate records and audit trails for DFU operational activity (for example, access requests, equipment movements and routine checks) to support governance and assurance requirements.
Managing case retention status, including identifying cases for retention, review, or destruction recording retention decisions and supporting disposal actions in case management systems.
Support the handling of digital exhibits (collection, transport and storage) in line with documented procedures.
Supporting day-to-day use of the DFU e-Discovery platforms (e.g. FTK Central, Magnet Review) outside of formal training sessions.
Assist with planned maintenance activities and operational tasks to support service availability and efficiency.
Liaise with internal and external stakeholders in a prompt, professional manner to support DFU service delivery.
About us
This role is hybrid at our Newcastle office.
NHSCFA values and respects the diversity of its employees and aims to recruit a workforce which reflects our diverse communities. We welcome applications irrespective of people's age, disability, gender, race or ethnicity, religion or belief, sexual orientation, or other personal circumstances. We have policies and procedures in place to ensure that all applicants are treated fairly and consistently at every stage of the recruitment process, including an invitation to the first stage of the selection process and consideration of reasonable adjustments for people who have a disability. We encourage applications from individuals interested in a secondment opportunity. If you are applying on this basis, please ensure you have obtained agreement in principle from your current employer. When you apply , you will be redirected to our recruitment system TRAC. The NHSCFA does not hold a sponsor licence in respect of skilled worker visas and so is unable to employ candidates requiring sponsorship.
To comply with the HM Government Functional Standard GovS 007, and specifically the Personnel Security Standards, individuals employed by NHS Counter Fraud Authority will be required to undergo Baseline Personnel Security Standards checks.
Job description
Job responsibilities
Support DFU operations by conducting technical and quality tasks to support DFU service delivery, as directed by the Digital Forensics Lead.
Perform maintenance activities as directed
Audit DFU activities to ensure compliance with the Forensic Science Regulators Code of Practice, ISO17025:2017, ILAC G19 and any information security requirements as directed by the Quality Manager.
Support onsite investigative activity, either in person or remotely when required. Flexibility is required as this may involve working outside standard office hours.
Collect, transport and store digital exhibits to support DFU customers, in line with documented procedures.
Carry out other duties consistent with the role, as directed by the Digital Forensics Lead.
Person Specification
SPEC
- oWorking knowledge of at least some of the following areas / operating systems.
- oFile servers (Microsoft / Apple / Unix / Linux)
- oNetworking (IP / LAN / WAN / Firewalls) oEmail servers and clients.
- oMobiles OS (iOS, Android, proprietary)
- oPeripherals (e.g. removable media, CD/DVD etc.).
- oComputer OS (Microsoft / Apple / Unix / Linux).
- oFile systems (FAT / NTFS / HFS+ APFS etc.).
- oDemonstrate knowledge of ACPO principles.
- oDemonstrate a thorough understanding of issues surrounding the proper handling of evidence within an investigatory environment.
- oExperience working within a digital forensics or eDiscovery environment (or a related operational/technical role).
- oExperience communicating technical information clearly to a range of stakeholders (written and verbal).
- oDegree or equivalent preferably Digital Forensics, Computer Science, Information Technology, or experience working within a digital forensics / eDiscovery environment or investigation or investigation support role.
- oStrong written and verbal communication skills, with the ability to communicate complex information clearly (both orally and in writing) with people at all levels and across professions.
- Working knowledge of Magnet Review or a similar eDiscovery platform.
- Practical experience in exhibiting evidence and producing witness statements suitable for Crown court.
- Either hold any of the following professional qualifications or equivalent knowledge and experience. For example: oMicrosoft Certified Professional (M.C.P.). oAccess Data Certified Examiner (ACE),oEnCase Certified Examiner (EnCE).
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
Employer details
Employer name
NHS Counter Fraud Authority
Address
1st Floor Citygate Gallowgate Newcastle upon Tyne NE1 4WH
Newcastle upon Tyne
NE1 4WH
Employer's website
https://cfa.nhs.uk/