Cyber incident investigation specialist conducts complex analysis to investigate causes of intrusion, attack, loss or breach occurring in an organisation. He/she identifies and defines cyber threats and root causes. He/she develops reports that detail incident timeline, evidence, findings, conclusions and recommendations and presents these reports to senior stakeholders. He/she is responsible for overseeing the performance of security response during a cyber incident and resolving the incidents in a timely manner. He/she develops, implements cyber incident response strategies and recommends corrective actions to prevent and mitigate internal control failures.