About the Workplace Safety and Insurance Board (WSIB)

We’re here to help. When an injury or illness happens on the job, we move quickly to provide wage-loss perks, medical coverage and support to help people get back to work. Funded by businesses, we also provide no-fault collective liability insurance and access to industry-specific health and safety information. We are one of the largest insurance organizations in North America covering over five million people in more than 300,000 workplaces across Ontario. For more information, visit wsib.ca.

From: $92,000.00 To: $115,000.00

This role requires the successful applicant to commit to an in-office work arrangement up to 5 days a week beginning in 2026.

Overview

We are seeking a Senior IT Forensic Specialist to support enterprise-wide forensic investigations, security incident response, vulnerability assessments, and penetration testing across the WSIB. This role helps protect the WSIB’s systems, data, and technology resources through expert investigation, analysis, and advisory support.

Key responsibilities

IT forensic investigations

- Lead complex IT forensic investigations across the WSIB
- Collect, preserve, analyze, recover, and dispose of digital evidence using proper chain-of-custody practices
- Prepare clear investigative reports, briefing notes, memoranda, and summaries for senior management
- Present findings professionally in administrative, quasi-judicial, or judicial proceedings when required
- Conduct sensitive HR-related IT investigations and prepare formal reports
- Provide expert advice on evidence handling, legislation, investigative practices, and forensic technologies
- Assess risks related to fraud, dishonesty, and data breaches, and recommend corrective actions
- Work with law enforcement where investigations may involve criminal matters
- Advise IT management, architecture, development teams, business areas, and HR on major fraud and control issues

External investigation support

- Assist WSIB Investigators with judicially authorized search warrants involving electronic evidence
- Support the search, seizure, and analysis of digital evidence
- Provide guidance on relevant case law and best practices for handling electronic evidence
- Review evidence and recommend action plans for complex investigations
- Respond to disclosure requests from legal counsel or third parties
- Prepare documents and provide testimony when required

Incident response and security investigations

- Respond to IT security incidents with expert analysis and recommendations
- Investigate the nature and impact of security incidents and support system and data recovery
- Review and improve incident response, recovery, and restoration procedures




- Identify vulnerabilities in the WSIB network and recommend mitigation strategies
- Conduct post-incident reviews to determine root causes and prevent recurrence
- Lead investigations into security breaches, misuse of IT assets, application security issues, and access concerns
- Work with third-party vendors to resolve security issues
- Support identity and access management through security-triggered access control processes

Vulnerability assessments and penetration testing

- Conduct vulnerability assessments on applications, networks, and systems
- Perform penetration testing as required
- Assess physical security controls for servers, systems, and networks
- Recommend practical improvements to reduce security risks
- Conduct open-source searches to support Corporate Security, HR, IT Security Operations, Stakeholder Compliance, and Legal
- Collect and document OSINT evidence, including social media, emails, and online content
- Provide advice on OSINT best practices
- Monitor and track potential threat actors and report findings as needed

Leadership and advisory

- Provide leadership and coordination on forensic investigations across the WSIB
- Support eDiscovery initiatives related to FOI and legal disclosure requests
- Help plan, design, and implement security procedures and technologies that support effective investigations
- Develop and maintain IT investigation policies, standards, templates, processes, and guidelines
- Provide technical training and advisory services related to fraud management and investigative tools
- Recommend proactive detection methods to identify possible fraudulent activity
- Participate in committees reviewing forensic methods, security technologies, and investigative techniques
- Represent the WSIB with standards bodies when required
- Stay current on emerging trends in forensics, OSINT, cyber threats, and Ontario and Canadian case law

What You Bring

- College diploma in Computer Science or equivalent experience
- At least 3 years of experience conducting or leading digital forensic investigations & 4 to 7 years of experience in IT Security
- Experience with digital forensic tools such as EnCase and AccessData
- Strong knowledge of digital evidence handling, incident response, vulnerability management, and penetration testing

At the WSIB, you’ll have the opportunity to:

- explore many career paths and follow your passion




- continuously learn and grow professionally
- be recognized for the great work you do
- participate in programs that support your health and wellbeing

You’ll also receive a competitive salary, along with a comprehensive benefit package and defined benefit pension plan.

Our commitment to equity, diversity and inclusion

We respect and value the diversity of our people. We strive to create an environment where employees can be themselves and where our differences are celebrated.

We value and celebrate diversity and are committed to creating inclusive experiences for both our employees and prospective employees. We invite all interested individuals to apply. If you require accommodations in order to apply to this position please contact If you are invited to participate in the interview or assessment process, you can advise our Recruiter of your accommodation needs at that time.

Please visit our EDI Vision to learn more about what actions WSIB are taking to advance our commitment to equity, diversity and inclusion and to support all employees participating and contributing to their full potential.

Disclosing conflicts of interest

As public servants, employees at the WSIB have a responsibility to act in an ethical way at all times to create a respectful workplace and maintain public trust. Job applicants are required to disclose any circumstance that could result in a real, potential or perceived conflict of interest. A conflict of interest is any situation where your private interests may impair or be perceived to impair the decisions you make in your official capacity. This may include: political activity, directorship, other outside employment and certain personal relationships (e.g. with current WSIB employees, customers and/or stakeholders). If you have any questions about conflict of interest obligations and/or how to make a disclosure, please contact the Talent Acquisition Centre at

Privacy information

We collect personal information from your resume, application, cover letter and references under the authority of the Workplace Safety and Insurance Act, 1997. The Talent Acquisition Centre and WSIB hiring parties will used this information to assess/validate your qualifications, determine if you meet the requirements of vacant positions and/or gather information relevant for recruitment purposes. If you have questions or concerns regarding the collection and use of your personal information, please contact the WSIB’s Privacy Office at The Privacy Office cannot provide information about the status of your application.

As a precondition of employment, the WSIB requires that prospective candidates undergo a criminal records name check any time before or after they are hired.

#J-18808-Ljbffr

📌 Senior IT Forensic Specialist (Toronto)
🏢 Workplace Safety and Insurance Board (WSIB)
📍 Toronto