Forensic eDiscovery Collection Specialist

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

Schwab’s expanding eDiscovery organization is strengthening its internal capability to preserve and collect electronically stored information across a complex enterprise environment. As a Forensic eDiscovery Collection Specialist, you will conduct defensible collections across endpoint, mobile, cloud, email, collaboration, and enterprise data sources while protecting evidentiary integrity, confidentiality, and chain of custody.

Your work will help shape consistent collection standards, documentation practices, and quality controls that support Schwab’s modernized eDiscovery operating model. You will solve technical challenges, make informed decisions when collection risks or source limitations arise, and collaborate with legal partners, business stakeholders, system owners, and service providers. By applying analytical thinking, attention to detail, and adaptability, you will improve scalable processes and help ensure collected information is complete, accurate, secure, and ready for litigation, regulatory, and downstream eDiscovery workflows.

• →Conduct thorough and defensible preservation and collection of ESI from enterprise systems, email, cloud and collaboration platforms, network locations, and other approved sources.
• →Collaborate with business stakeholders and system owners to scope collection efforts and resolve access, retention, and technical-source questions.
• →Use approved tools and procedures to perform forensic imaging, targeted collection, hashing, export, and validation while maintaining chain of custody and evidentiary integrity.
• →Maintain detailed evidence inventories, chain-of-custody records, collection notes, scope decisions, methodologies, tools used, validation data, exceptions, and issues encountered.
• →Preserve the integrity, security, and confidentiality of collected information and ensure data is protected from alteration, loss, or corruption.
• →Conduct quality-control checks, validation, and reconciliation to confirm the completeness and accuracy of collected data.
• →Securely stage, encrypt, transfer, and reconcile collected data for RelativityOne, downstream eDiscovery workflows, or approved service providers.
• →Develop, document, and continuously improve collection methodologies, technical procedures, quality controls, source documentation, and job aids to support repeatability, defensibility, and auditability.
• →Stay informed about eDiscovery and digital-forensics technologies and best practices, and apply relevant developments to improve collection processes.
• →Support declarations, depositions, or testimony regarding collection methods and validity, as needed, and escalate collection limitations, preservation risks, source gaps, and unexpected findings.

• Bachelor’s degree in Information Technology, Computer Science, or a related field. Equivalent relevant work experience may be considered.
• Minimum two years of experience in eDiscovery, digital forensics, forensic technology, DFIR, information security investigations, enterprise data acquisition, or a related field.
• Strong understanding of eDiscovery processes, including the EDRM, legal holds, retention, records management, and relevant data privacy and protection requirements.
• Hands-on experience conducting defensible collections across endpoint, mobile, cloud, and enterprise data sources using commercially recognized forensic and collection tools such as Relativity, Exterro, WinSCP, Cellebrite, and EnCase.
• Knowledge of chain of custody, evidence handling, hashing, forensic imaging, secure transfer, and collection documentation standards.
• Excellent analytical and problem-solving skills, with strong attention to detail and a commitment to data integrity and quality control.
• Ability to manage multiple projects simultaneously, scope work with legal and technical teams, and meet deadlines.
• Excellent written, verbal, and technical-documentation skills, with the ability to communicate effectively with technical and non-technical stakeholders.
• High degree of professionalism and discretion when handling confidential and legally sensitive information.

• Experience in financial services or other highly regulated industries.
• Experience with Microsoft 365, cloud-based collections, or mobile device collections.
• Certification in eDiscovery and/or digital forensics, such as CFCE, EnCE, CEDS, GCFE, or GCFA, is highly preferred.
• Experience supporting litigation, regulatory investigations, or enterprise legal matters.
• Knowledge of information governance and records management principles.
• Experience collecting Microsoft 365, cloud collaboration, messaging, and mobile-device data.
• Financial-services or other regulated-industry experience.
• Experience working under the direction of counsel.