The posting
TITLE: Records Custodian, ECD DATE PREPARED: July 2026 FLSA: Exempt DIVISION: Exploited Children Division DEPARTMENT: CyberTipline AREA OF FOCUS: Records Custodian TRAVEL REQUIREMENT: Travel (domestic and international) is required and may include holidays and weekends. Due to the nature of trials and testimony, travel may be unpredictable or subject to change with short notice. HOURS and SCHEDULE: Monday – Friday, 9:00am to 5:30pm (37.5 hours within five (5) days per week, with allowance of up to one (1) telework day per week); unless otherwise required or approved by management. On-call availability, flexibility in scheduling, after-hours, and weekend response for this position is required. SUPERVISION RECEIVED: Position reports to the Executive Director, Exploited Children Division. SUPERVISION EXERCISED: None. RESPONSIBILITY FOR PUBLIC CONTACT: Position requires daily contact with NCMEC’s Office of Legal Counsel (OLC) staff, prosecutors and defense attorneys, victim witness coordinators, private legal counsel and law firm staff, and law enforcement. At times, this position may also interact with Electronic Service Providers, technology companies, members of the public, NGOs, community outreach groups, and other external stakeholders. Sound judgement, courtesy, and discretion are required. GENERAL DESCRIPTION: The Records Custodian serves as a subject matter expert on the National Center for Missing & Exploited Children's (NCMEC) CyberTipline and Child Victim Identification Program (CVIP), with primary responsibility for supporting judicial proceedings and legal filings involving CyberTipline and CVIP records, operational processes, and business practices and NCMEC’s Congressionally designated programs and organizational structure. The position works closely with NCMEC's Office of Legal Counsel (OLC) to support NCMEC’s involvement in judicial and regulatory proceedings, including but not limited to: supporting preparation of business record declarations, affidavits, and related judicial filings/communications; providing technical assistance to prosecutors, defense counsel, and government and private attorneys on CyberTipline and CVIP operations; preparing image descriptions of child sexual abuse material and reviewing and summarizing NCMEC CyberTipline and CVIP reports; providing sworn testimony in in state, federal, military, and international regulatory, criminal, and civil judicial proceedings and inquiries regarding NCMEC’s operations relating to the receipt, storage, processing, and dissemination of CyberTipline and CVIP reports. The Records Custodian develops and maintains expert knowledge of CyberTipline and CVIP operations, including Electronic Service Provider (ESP) reporting methods, public reporting mechanisms, automated system processes, report structure, metadata, and workflow business records, NCMEC technology and voluntary initiatives, and the methods by which CyberTipline and CVIP reports are made available to law enforcement. In addition, the Records Custodian is expected to develop a working understanding of NCMEC’s operational programs, organizational history, and funding sources. The position is expected to quickly establish credibility as NCMEC's operational representative on these topics and effectively communicate complex technical and operational concepts to judges, prosecutors, defense counsel, private counsel, regulators, investigators, and other stakeholders. The Records Custodian will work closely with OLC and NCMEC’s outside counsel on training and educational opportunities to support the anticipated responsibilities. Additionally, working closely with ECD leadership, OLC, and cross-functional teams, the Records Custodian will identify opportunities to improve report processing, quality assurance, operational workflows, NCMEC report formats and language, and organizational policies. The position analyzes reporting trends, emerging technologies, and operational challenges; provides recommendations to leadership; and supports the development and implementation of process improvements that enhance the effectiveness, consistency, and quality of CyberTipline and CVIP operations. The Records Custodian collaborates extensively across ECD programs, including the CyberTipline, CVIP, ESP Relations, technology teams, and external partners to ensure consistent operational practices and coordinated responses to emerging issues. The position also serves as a resource for internal and external stakeholders regarding CyberTipline processes, reporting practices, and operational guidance. This position requires exceptional communication, analytical, and organizational skills, along with the ability to perform effectively and confidently in high-pressure environments where accuracy, professionalism, and sound judgment are essential. The successful candidate will work with NCMEC staff to develop appropriates skills to comfortably and confidently provide technical assistance to third parties and sworn testimony in a variety of environments, including live, phone, and video settings in jury and bench trials, at depositions, and as part of formal third party inquiries. The Records Custodian also will engage with senior law enforcement and government officials, and represent NCMEC at trainings and other public-facing engagements. ESSENTIAL DUTIES AND RESPONSIBILITIES: Develop and maintain subject matter expertise relating to the CyberTipline, CVIP, and related NCMEC operational processes, policies, and business records. Prepare for and provide sworn testimony in criminal, civil, and administrative proceedings on behalf of NCMEC regarding the CyberTipline, CVIP, and related NCMEC operational programs concerning NCMEC business records and operational processes. This includes reviewing CyberTipline and CVIP reports, affidavits, supporting documentation, and coordinating document and testimony preparation with NCMEC's Office of Legal Counsel (OLC). Partner with OLC to respond to legal requests involving CyberTipline and CVIP reports, records, subpoenas, affidavits, declarations, and other legal process, ensuring timely and accurate responses. Review child sexual abuse material received in CyberTipline reports or CVIP submissions to prepare image descriptions. As needed, collaborate with ECD leadership to evaluate CyberTipline and CVIP report quality, actionability, and reporting trends using feedback from law enforcement, Internet Crimes Against Children (ICAC) Task Forces, international law enforcement agencies, and other stakeholders. Assist in the development, implementation, and continuous improvement of CyberTipline and CVIP processing policies, procedures, quality assurance measures, and best practices, including Electronic Service Provider (ESP) reporting guidance and metadata analysis. Participate in law enforcement and ESP conferences, meetings, syncs, and recalibrations regarding ESP reporting and child victim identification. Analyze CyberTipline and CVIP trends, emerging technologies, and patterns of child sexual exploitation to identify operational improvements and provide recommendations and insights to ECD leadership. Contribute to the development of analytical products, statistical reports, briefing materials, and presentations regarding CyberTipline and CVIP operations and child sexual exploitation trends for internal and external audiences. Process CyberTipline and CVIP reports, conduct bulk file review and categorization of reported files, and provide technical assistance to law enforcement and Electronic Service Providers during periods of increased reporting volume or operational need. Represent ECD during outreach activities, demonstrations, trainings, media interviews, tours, conferences, and meetings with law enforcement, government agencies, Electronic Service Providers, and other stakeholders. Coordinate with ECD leadership on operational initiatives, program development, special projects, and implementation of new technologies, workflows, and strategic priorities. Serve as a liaison between ECD staff, leadership, and internal partners on operational procedures, policies, and process improvements. Maintain the confidentiality, integrity, and security of highly sensitive information in accordance with applicable laws, organizational policies, and established procedures. Promote and uphold NCMEC's mission, values, and professional standards while fostering collaborative relationships with coworkers, law enforcement, prosecutors, attorneys, Electronic Service Providers, and other partners. Perform other duties as assigned. EDUCATION AND EXPERIENCE: Bachelor’s degree in Criminal Justice, Legal Studies, Information Systems, Cybersecurity, Public Administration, or a related field. Minimum of five (5) years of professional experience supporting child sexual exploitation related matters, digital evidence, cybercrime, online child exploitation investigations, and/or related criminal justice programs is preferred. Experience with affidavits, declarations, legal filings, testimony and other aspects and documents supporting criminal, civil, and regulatory investigations or judicial proceedings is preferred. Demonstrated knowledge of the CyberTipline, electronic service provider reporting, digital evidence, and/or the criminal justice process. Experience researching, analyzing, and interpreting technical information and case-related documentation. Exceptional written and verbal communication skills, including the ability to explain complex technical and operational processes to law enforcement, prosecutors, defense counsel, regulators, private counsel, judges, and juries. KNOWLEDGE, SKILLS AND ABILITIES: Demonstrated confidence, professionalism, and exceptional public speaking, presentation, and communication skills, including the ability to effectively communicate complex technical and operational concepts to law enforcement, prosecutors, defense counsel, regulators, juries, private counsel, judges, and other stakeholders. Demonstrated ability to prepare and deliver testimony, technical assistance, presentations, reports, affidavits, declarations, or other official documentation in support of criminal, civil, and regulatory proceedings. Ability to rapidly develop subject matter expertise in the CyberTipline and CVIP, including operational processes, reporting workflows, business records, and applicable policies and procedures. Strong Internet research and technical investigative skills, including familiarity with Electronic Service Providers (ESPs), online platforms, and open-source investigative tools such as search engines, DNS lookups, WHOIS, traceroute, and similar applications. Demonstrated analytical skills with the ability to evaluate information, interpret policies and procedures, and communicate findings clearly and accurately. Thorough understanding of the importance of maintaining accurate business records, chain of custody, confidentiality, and the integrity of sensitive information. Demonstrated ability to manage multiple high-priority assignments simultaneously while maintaining exceptional attention to detail and meeting deadlines. Exceptional organizational, interpersonal, and problem-solving skills, with the ability to work independently and collaboratively in a fast-paced environment. Demonstrated proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, Outlook, and database applications.
