Records Custodian

FLSA: Exempt | Division: Exploited Children Division | Department: CyberTipline

About the role

The Records Custodian serves as NCMEC's subject matter expert on the CyberTipline and Child Victim Identification Program (CVIP), supporting judicial proceedings and legal filings involving CyberTipline and CVIP records, operational processes, and NCMEC's Congressionally designated programs. Working closely with NCMEC's Office of Legal Counsel (OLC), the position supports preparation of business record declarations, affidavits, and judicial filings; provides technical assistance to prosecutors, defense counsel, and government and private attorneys; prepares image descriptions of child sexual abuse material; and provides sworn testimony in state, federal, military, and international proceedings regarding NCMEC's operations.

This position requires exceptional communication, analytical, and organizational skills, along with the ability to perform effectively and confidently in high-pressure environments where accuracy, professionalism, and sound judgment are essential. The successful candidate will work with NCMEC staff to develop the skills needed to confidently provide technical assistance and sworn testimony in live, phone, and video settings, including jury and bench trials, depositions, and formal third-party inquiries. The Records Custodian will also engage with senior law enforcement and government officials and represent NCMEC at trainings and other public-facing engagements.

Responsibilities

• Develop and maintain subject matter expertise relating to the CyberTipline, CVIP, and related NCMEC operational processes, policies, and business records.
• Prepare for and provide sworn testimony in criminal, civil, and administrative proceedings on behalf of NCMEC, including reviewing reports, affidavits, and supporting documentation, and coordinating preparation with OLC.
• Partner with OLC to respond to legal requests involving CyberTipline and CVIP reports, records, subpoenas, affidavits, declarations, and other legal process.
• Review child sexual abuse material received in CyberTipline reports or CVIP submissions to prepare image descriptions.
• Collaborate with ECD leadership to evaluate report quality, actionability, and reporting trends using feedback from law enforcement, ICAC Task Forces, and international agencies.
• Assist in developing and improving CyberTipline and CVIP processing policies, procedures, and quality assurance measures, including ESP reporting guidance. Participate in law enforcement and ESP conferences and meetings.
• Analyze CyberTipline and CVIP trends, emerging technologies, and patterns of child sexual exploitation to identify operational improvements and provide recommendations to leadership.
• Contribute to analytical products, statistical reports, briefing materials, and presentations for internal and external audiences.
• Process CyberTipline and CVIP reports, conduct bulk file review and categorization, and provide technical assistance during periods of increased reporting volume.
• Represent ECD during outreach activities, demonstrations, trainings, media interviews, tours, conferences, and meetings with law enforcement, government agencies, and other stakeholders.
• Coordinate with ECD leadership on operational initiatives, program development, and implementation of new technologies and workflows.
• Serve as a liaison between ECD staff, leadership, and internal partners on operational procedures and process improvements.
• Maintain the confidentiality, integrity, and security of highly sensitive information.
• Promote and uphold NCMEC's mission, values, and professional standards while fostering collaborative relationships with coworkers, law enforcement, prosecutors, attorneys, and other partners.

Requirements

• Bachelor's degree in Criminal Justice, Legal Studies, Information Systems, Cybersecurity, Public Administration, or a related field.
• Minimum of five (5) years of professional experience supporting child sexual exploitation related matters, digital evidence, cybercrime, online child exploitation investigations, and/or related criminal justice programs is preferred.
• Experience with affidavits, declarations, legal filings, testimony, or other documents supporting criminal, civil, or regulatory proceedings is preferred.
• Demonstrated knowledge of the CyberTipline, ESP reporting, digital evidence, and/or the criminal justice process.
• Experience researching, analyzing, and interpreting technical information and case-related documentation.

Skills

• Demonstrated confidence, professionalism, and exceptional public speaking and communication skills, including the ability to explain complex technical and operational concepts to law enforcement, prosecutors, defense counsel, regulators, juries, private counsel, and judges.
• Demonstrated ability to prepare and deliver testimony, technical assistance, presentations, and official documentation in support of criminal, civil, and regulatory proceedings.
• Ability to rapidly develop subject matter expertise in the CyberTipline and CVIP, including operational processes, reporting workflows, business records, and applicable policies.
• Strong Internet research and technical investigative skills, including familiarity with Electronic Service Providers, online platforms, and open-source investigative tools (search engines, DNS lookups, WHOIS, traceroute).
• Demonstrated analytical skills with the ability to evaluate information, interpret policies and procedures, and communicate findings clearly.
• Thorough understanding of maintaining accurate business records, chain of custody, confidentiality, and the integrity of sensitive information.
• Demonstrated ability to manage multiple high-priority assignments simultaneously with exceptional attention to detail.
• Exceptional organizational, interpersonal, and problem-solving skills, with the ability to work independently and collaboratively in a fast-paced environment.
• Demonstrated proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, Outlook, and database applications.

Public Contact

Position requires daily contact with NCMEC's Office of Legal Counsel (OLC) staff, prosecutors and defense attorneys, victim witness coordinators, private legal counsel and law firm staff, and law enforcement. At times, this position may also interact with Electronic Service Providers, technology companies, members of the public, NGOs, community outreach groups, and other external stakeholders. Sound judgement, courtesy, and discretion are required.

Travel

Travel (domestic and international) is required and may include holidays and weekends. Due to the nature of trials and testimony, travel may be unpredictable or subject to change with short notice.

Schedule

Monday – Friday, 9:00am to 5:30pm (37.5 hours within five (5) days per week, with allowance of up to one (1) telework day per week); unless otherwise required or approved by management. On-call availability, flexibility in scheduling, after-hours, and weekend response for this position is required.