Digital Forensics & eDiscovery Manager

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology.

The Legal Compliance Organization (LCO) provides legal guidance to further KLA’s strategic objectives and protect and preserve the company's legal, ethical and financial integrity and reputation. Drawing on expertise in corporate law, commercial law, employment law, ethics and compliance, and intellectual property, the LCO offers strategic legal counsel that is informed by a clear understanding of the company’s business objectives and knowledge of the laws and regulations relevant to the business worldwide.

In this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise. As a member of the Legal and Compliance Organization (“LCO”), you will lead KLA’s digital forensics, investigations support, ESI preservation, eDiscovery, information governance, and forensic advisory functions. You will serve as the primary escalation point and subject-matter lead for digital forensic investigations, legal holds, eDiscovery collections and review, insider risk support, mobile and remote collections, cloud and collaboration-platform evidence, AI-related evidence, and cross-functional matters involving Legal, Compliance, Human Resources, Cybersecurity, IT, Intellectual Property, and business stakeholders.

The role requires a hands‑on leader who can mentor a global team, apply forensic judgment to new technologies, and translate complex data into accurate, defensible, timely, and business‑relevant findings.

• Lead, mentor, and develop a global digital forensics and eDiscovery team, including internal analysts, contractors, external vendors, and regional support partners.
• Oversee defensible forensic analysis, evidence preservation, data collection, review support, reporting, and evidence interpretation for investigations, legal matters, business functions, and global evidence management activities.
• Analyze evidence from endpoint DLP, Microsoft 365 Purview, Teams, Outlook, One Drive, SharePoint, SIEM/security logs, Intune/MDM, mobile devices, network/cloud artifacts, OSINT sources, and AI prompts, outputs, and usage logs where available.
• Manage forensic imaging, remote endpoint collections, targeted mobile collections, evidence intake, release, disposition, and chain‑of‑custody processes in accordance with applicable law, policy, and legal hold obligations.
• Improve eDiscovery and ESI preservation processes, including legal holds, custodian identification, data collection, review set preparation, reconciliation, release workflows, and defensible retention or disposition decisions.
• Develop defensible approaches for AI‑related evidence, including prompts, inputs, outputs, usage logs, model‑assisted summaries, and AI‑generated or AI‑modified content, with appropriate human validation and privilege, privacy, security, and records‑management controls.
• Partner with Cybersecurity and IT on incident response, insider risk, monitoring, logging, forensic readiness, threat‑related investigations, and post‑incident evidence preservation.
• Support LCO special projects, including information governance, data mapping, records and hard‑drive disposition, communication monitoring governance, fraud and impersonation takedowns, dawn raid readiness, policy initiatives, training, dashboards, and workflow automation.

Drafting forensic…