Records Custodian, ECD

National Center for Missing & Exploited Children•Alexandria, VA
•$80,000 - $90,000

About The Position

The Records Custodian serves as a subject matter expert on NCMEC’s CyberTipline and Child Victim Identification Program (CVIP), primarily supporting judicial proceedings and legal filings involving program records, operational processes, business practices, and NCMEC’s designated programs and organizational structure. The role works closely with NCMEC’s Office of Legal Counsel (OLC) on legal and regulatory proceedings, including preparing business-record declarations, affidavits, and related filings; providing technical assistance to attorneys and other stakeholders; reviewing and summarizing reports; preparing image descriptions; and providing sworn testimony in criminal, civil, administrative, and regulatory proceedings and inquiries. The position develops and maintains expert knowledge of CyberTipline and CVIP operations, including Electronic Service Provider reporting, public reporting mechanisms, automated systems, report structure, metadata, workflows, NCMEC technology and voluntary initiatives, and the ways reports are made available to law enforcement. It also develops a working understanding of NCMEC’s operational programs, organizational history, and funding sources, and communicates complex operational and technical concepts to legal, government, law-enforcement, and other audiences. Working with OLC, outside counsel, ECD leadership, and cross-functional teams, the Records Custodian supports training and educational opportunities and identifies improvements to report processing, quality assurance, workflows, report formats and language, and organizational policies. The role analyzes reporting trends, emerging technologies, and operational challenges; recommends improvements; and contributes to consistent, effective CyberTipline and CVIP operations. It collaborates across ECD programs and with external partners, provides operational guidance, represents NCMEC in public-facing engagements, and handles highly sensitive information with accuracy, professionalism, discretion, and sound judgment. The schedule is Monday through Friday, 9:00 a.m. to 5:30 p.m. (37.5 hours over five days), with up to one telework day per week unless otherwise required or approved by management. On-call availability, scheduling flexibility, and after-hours and weekend responses are required. Domestic and international travel is required and may include holidays and weekends; travel related to trials and testimony may be unpredictable or change at short notice.

Requirements

  • Bachelor’s degree in Criminal Justice, Legal Studies, Information Systems, Cybersecurity, Public Administration, or a related field.
  • Demonstrated knowledge of the CyberTipline, ESP reporting, digital evidence, and/or the criminal justice process.
  • Experience researching, analyzing, and interpreting technical information and case-related documentation.
  • Exceptional written and verbal communication skills, including the ability to explain complex technical and operational processes to diverse audiences.
  • Demonstrated confidence, professionalism, public-speaking, presentation, and communication skills.
  • Ability to prepare and deliver testimony, technical assistance, presentations, reports, affidavits, declarations, or other official documentation supporting proceedings.
  • Ability to rapidly develop subject matter expertise in CyberTipline and CVIP processes, workflows, business records, policies, and procedures.
  • Strong Internet research and technical investigative skills, including familiarity with ESPs, online platforms, and open-source tools such as search engines, DNS lookups, WHOIS, and traceroute.
  • Analytical ability to evaluate information, interpret policies and procedures, and communicate findings clearly and accurately.
  • Understanding of accurate business records, chain of custody, confidentiality, and sensitive-information integrity.
  • Ability to manage multiple high-priority assignments while maintaining attention to detail and meeting deadlines.
  • Strong organizational, interpersonal, and problem-solving skills and ability to work independently and collaboratively in a fast-paced environment.
  • Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and Outlook, and database applications.
  • Ability to travel domestically and internationally, potentially on holidays and weekends, with travel that may be unpredictable or change on short notice.
  • Availability for on-call duties, flexible scheduling, and after-hours and weekend response.

Nice To Haves

  • At least five years of professional experience supporting child sexual exploitation matters, digital evidence, cybercrime, online child exploitation investigations, and/or related criminal justice programs is preferred.
  • Experience with affidavits, declarations, legal filings, testimony, and other documents or activities supporting criminal, civil, and regulatory investigations or judicial proceedings is preferred.

Responsibilities

  • Develop and maintain subject matter expertise regarding the CyberTipline, CVIP, and related NCMEC operational processes, policies, and business records.
  • Prepare for and provide sworn testimony in criminal, civil, and administrative proceedings regarding the CyberTipline, CVIP, and related NCMEC operations; review reports and supporting documents and coordinate preparation with OLC.
  • Partner with OLC to respond accurately and promptly to legal requests involving reports, records, subpoenas, affidavits, declarations, and other legal process.
  • Review child sexual abuse material received through CyberTipline reports or CVIP submissions and prepare image descriptions.
  • Work with ECD leadership to evaluate report quality, actionability, and trends using feedback from law enforcement, ICAC Task Forces, international law enforcement, and other stakeholders.
  • Help develop, implement, and continuously improve processing policies, procedures, quality assurance measures, and best practices, including ESP reporting guidance and metadata analysis.
  • Participate in law-enforcement and ESP conferences, meetings, syncs, and recalibrations concerning ESP reporting and child victim identification.
  • Analyze reporting trends, emerging technologies, and patterns of child sexual exploitation; identify operational improvements and provide recommendations to ECD leadership.
  • Contribute to analytical products, statistical reports, briefing materials, and presentations on program operations and trends for internal and external audiences.
  • Process CyberTipline and CVIP reports, conduct bulk file review and categorization, and provide technical assistance to law enforcement and ESPs during increased reporting volume or other operational needs.
  • Represent ECD at outreach activities, demonstrations, trainings, media interviews, tours, conferences, and meetings with stakeholders.
  • Coordinate with ECD leadership on operational initiatives, program development, special projects, and implementation of technologies, workflows, and strategic priorities.
  • Serve as a liaison between ECD staff, leadership, and internal partners on operational procedures, policies, and improvements.
  • Maintain the confidentiality, integrity, and security of sensitive information in accordance with applicable laws, policies, and procedures.
  • Promote NCMEC’s mission, values, and professional standards and foster collaborative relationships with colleagues and partners.
  • Perform other duties as assigned.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service