About the Workplace Safety and Insurance Board (WSIB)
We’re here to help. When an injury or illness happens on the job, we move quickly to provide wage-loss benefits, medical coverage and support to help people get back to work. Funded by businesses, we also provide no-fault collective liability insurance and access to industry-specific health and safety information. We are one of the largest insurance organizations in North America covering over five million people in more than 300,000 workplaces across Ontario. For more information, visit wsib.ca.

From: $92,000.00 To: $115,000.00

This role requires the successful applicant to commit to an in-office work arrangement up to 5 days a week beginning in 2026.

Overview
We are seeking a Senior IT Forensic Specialist to support enterprise-wide forensic investigations, security incident response, vulnerability assessments, and penetration testing across the WSIB. This role helps protect the WSIB’s systems, data, and technology resources through expert investigation, analysis, and advisory support.

Key responsibilities
IT forensic investigations

Lead complex IT forensic investigations across the WSIB

Collect, preserve, analyze, recover, and dispose of digital evidence using proper chain-of-custody practices

Prepare clear investigative reports, briefing notes, memoranda, and summaries for senior management

Present findings professionally in administrative, quasi-judicial, or judicial proceedings when required

Conduct sensitive HR-related IT investigations and prepare formal reports

Provide expert advice on evidence handling, legislation, investigative practices, and forensic technologies

Assess risks related to fraud, dishonesty, and data breaches, and recommend corrective actions

Work with law enforcement where investigations may involve criminal matters

Advise IT management, architecture, development teams, business areas, and HR on major fraud and control issues

External investigation support

Assist WSIB Investigators with judicially authorized search warrants involving electronic evidence

Support the search, seizure, and analysis of digital evidence

Provide guidance on relevant case law and best practices for handling electronic evidence

Review evidence and recommend action plans for complex investigations

Respond to disclosure requests from legal counsel or third parties

Prepare documents and provide testimony when required

Incident response and security investigations

Respond to IT security incidents with expert analysis and recommendations

Investigate the nature and impact of security incidents and support system and data recovery

Review and improve incident response, recovery, and restoration procedures

Identify vulnerabilities in the WSIB network and recommend mitigation strategies





Conduct post-incident reviews to determine root causes and prevent recurrence

Lead investigations into security breaches, misuse of IT assets, application security issues, and access concerns

Work with third-party vendors to resolve security issues

Support identity and access management through security-triggered access control processes

Vulnerability assessments and penetration testing

Conduct vulnerability assessments on applications, networks, and systems

Perform penetration testing as required

Assess physical security controls for servers, systems, and networks

Recommend practical improvements to reduce security risks

Conduct open-source searches to support Corporate Security, HR, IT Security Operations, Stakeholder Compliance, and Legal

Collect and document OSINT evidence, including social media, emails, and online content

Provide advice on OSINT best practices

Monitor and track potential threat actors and report findings as needed

Leadership and advisory

Provide leadership and coordination on forensic investigations across the WSIB

Support eDiscovery initiatives related to FOI and legal disclosure requests

Help plan, design, and implement security procedures and technologies that support effective investigations

Develop and maintain IT investigation policies, standards, templates, processes, and guidelines

Provide technical training and advisory services related to fraud management and investigative tools

Recommend proactive detection methods to identify possible fraudulent activity

Participate in committees reviewing forensic methods, security technologies, and investigative techniques

Represent the WSIB with standards bodies when required

Stay current on emerging trends in forensics, OSINT, cyber threats, and Ontario and Canadian case law

What You Bring

College diploma in Computer Science or equivalent experience

At least 3 years of experience conducting or leading digital forensic investigations & 4 to 7 years of experience in IT Security

Experience with digital forensic tools such as EnCase and AccessData

Strong knowledge of digital evidence handling, incident response, vulnerability management, and penetration testing

At the WSIB, you’ll have the opportunity to:

explore many career paths and follow your passion

continuously learn and grow professionally

be recognized for the outstanding work you do





participate in programs that support your health and wellbeing

You’ll also receive a competitive salary, along with a comprehensive benefit package and defined benefit pension plan.

Our commitment to equity, diversity and inclusion
We respect and value the diversity of our people. We strive to create an environment where employees can be themselves and where our differences are celebrated.

We value and celebrate diversity and are committed to creating inclusive experiences for both our employees and prospective employees. We invite all interested individuals to apply. If you require accommodations in order to apply to this position please contact [email protected]. If you are invited to participate in the interview or assessment process, you can advise our Recruiter of your accommodation needs at that time.

Please visit our EDI Vision to learn more about what actions WSIB are taking to advance our commitment to equity, diversity and inclusion and to support all employees participating and contributing to their full potential.

Disclosing conflicts of interest
As public servants, employees at the WSIB have a responsibility to act in an ethical way at all times to create a respectful workplace and maintain public trust. Job applicants are required to disclose any circumstance that could result in a real, potential or perceived conflict of interest. A conflict of interest is any situation where your private interests may impair or be perceived to impair the decisions you make in your official capacity. This may include: political activity, directorship, other outside employment and certain personal relationships (e.g. with current WSIB employees, customers and/or stakeholders). If you have any questions about conflict of interest obligations and/or how to make a disclosure, please contact the Talent Acquisition Centre at [email protected].

Privacy information
We collect personal information from your resume, application, cover letter and references under the authority of the Workplace Safety and Insurance Act, 1997. The Talent Acquisition Centre and WSIB hiring parties will used this information to assess/validate your qualifications, determine if you meet the requirements of vacant positions and/or gather information relevant for recruitment purposes. If you have questions or concerns regarding the collection and use of your personal information, please contact the WSIB’s Privacy Office at [email protected]. The Privacy Office cannot provide information about the status of your application.

As a precondition of employment, the WSIB requires that prospective candidates undergo a criminal records name check any time before or after they are hired.

#J-18808-Ljbffr

📌 Senior IT Forensic Specialist (Ontario)
🏢 Workplace Safety and Insurance Board (WSIB)
📍 Ontario