Manager - Data Science (Risk / Fraud)

Job Title : Manager - Data Science (Risk/Fraud)

Onsite working: Hyderabad

EC-Council is the world's largest cyber security technical certification body. We operate in 145 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.

Position Summary

This role is responsible for safeguarding the integrity, validity, and defensibility of certification exams at scale. It combines forensic investigation, data science, advanced analytics, and structured audit governance to ensure that every exam outcome is not only operationally sound but analytically and forensically defensible.

You will lead the design and operation of a data-driven exam integrity system, using Splunk and related technologies to detect, investigate, and prevent integrity risks across large-scale exam data.

This is a hands-on role requiring strong capability in data analysis, query building, and pattern detection, with the expectation to move beyond case-by-case investigation and build scalable detection and risk models.

In this role, you will:Build systems that detect risk patterns not just investigate incidentsApply data science and analytical thinking to exam forensicsConnect identity, behavior, supervision, and outcomes into clear insightsEnable consistent, evidence-based decisions at scale Core Responsibilities:

Exam Forensics & Investigations

You will lead complex investigations into exam misconduct and integrity breaches, ensuring that conclusions are evidence-based and defensible.

Key focus areas:Investigate impersonation, proxy testing, coordinated behavior, and content compromiseAnalyze video feeds, proctoring logs, identity signals, and behavioral patternsApply forensic analysis across multiple data sources to reconstruct eventsBuild structured, evidence-backed cases and recommend actions (hold, retake, invalidate)Work across regions and stakeholders to validate findings and drive resolution Data Science, Detection & Advanced Analytics

You will build and operate the analytical engine behind exam integrity, with a strong focus on data science and advanced analytics.

Key focus areas:Design detection logic using Splunk and large-scale log dataDevelop analytics across identity, location, behavior, supervision, and outcomesBuild correlation models linking multiple signals into risk indicatorsApply statistical thinking to identify anomalies and patternsContinuously refine detection models based on emerging fraud patternsCreate scalable frameworks for anomaly detection and pattern recognition Monitoring, Risk Profiling & Early Detection

You will shift the organization from reactive investigation to proactive, intelligence-led risk detection.

Key focus areas:Monitor candidate, session, and supervision risk profilesIdentify repeat patterns and emerging threatsDetect high-risk environments and recurring anomaliesDefine thresholds and models for risk classificationEnable early intervention before issues scale Exam Outcome Integrity & Psychometric Monitoring

You will ensure that exam outcomes remain statistically valid and defensible.

Key focus areas:Monitor score distributions and pass rate behaviorDetect clustering near pass thresholds ( 5% band)Identify form-level anomalies, drift, or compromise indicatorsApply analytical and statistical methods to validate outcomesSupport defensibility of certification results Audit, Compliance & Data-Driven Governance

You will strengthen audit processes using structured, data-backed approaches.

Key focus areas:Ensure compliance with defined integrity and security standardsSupport audit programs and certification reviewsValidate audit outcomes using data rather than manual checksMaintain clear audit trails and evidence structuresDrive consistency and defensibility in decision-making Monitoring, Dashboards & Reporting

You will build visibility into exam integrity through strong analytics and reporting.

Key focus areas:Design dashboards for real-time risk monitoringHighlight anomaly concentration and emerging fraud patternsGenerate actionable insights for leadershipMove from reporting metrics to decision-oriented analytics Team Leadership & Capability Building

You will lead a team responsible for high-volume session review and analysis.

Key focus areas:Manage workload, quality, and SLA adherenceBuild analytical and forensic capability within the teamEnsure consistency in investigation outcomesDrive a culture of structured, data-driven decision-making Stakeholder & Ecosystem Management

You will work across internal and external stakeholders to maintain integrity standards.

Key focus areas:Collaborate with global teams and partnersManage relationships with proctoring and delivery vendorsCommunicate complex findings clearly to leadershipDrive accountability using data and insights What We're Looking For

We are looking for someone with strong experience in exam integrity, fraud analytics, cybersecurity analytics, or forensic investigations, ideally in environments where outcomes must be defensible and auditable.

Core Requirements (Non-Negotiable)8-12 years of relevant experienceAdvanced hands-on expertise in Splunk (search, correlation, dashboards, detection logic)Strong capability in:Writing and optimizing queries (SPL, SQL or similar)Working with large-scale log and event dataBuilding detection logic and analytical modelsStrong analytical and data science orientation:Pattern recognitionAnomaly detectionCorrelation across multiple data sourcesProven forensic thinking:Ability to connect identity, behavior, supervision, and outcomes into a clear risk narrative Technical Skills (Expected)Strong proficiency in:SPL (Splunk Query Language)SQL or similar query languagesWorking knowledge of:Python or similar scripting language for data analysisData visualization tools (Tableau, Power BI, or similar)Experience with:Log analysis platforms / SIEM systemsLarge datasets and structured/unstructured dataUnderstanding of:Behavioral analytics and anomaly detection techniques Good to HaveExperience with certification or testing environmentsExposure to remote proctoring systemsUnderstanding of exam scoring, cut scores, and statistical behaviorFamiliarity with standards such as ISO/IEC 17024 Important Note

This role requires strong hands-on capability in data analytics, Splunk (advanced level), and forensic investigation thinking. It is not suited for purely audit, operations, or process-driven profiles.

About Our Culture:

EC-Council is driven by a mission to strengthen global cybersecurity capability and advance the profession of ethical hacking and information security. Our teams operate across regions and cultures, united by integrity, professionalism, and a commitment to meaningful impact. Continuous learning and accountability are encouraged, empowering individuals to take ownership of their contributions.

Respect, trust, and ethical conduct guide how we work with colleagues, partners, and the global cybersecurity community.

Additional Information:

EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.

EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at and let us know how we can assist.

To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.

If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title . click apply for full job details