Cybersecurity Hiring Modernization Act

This Act may be cited as the Cybersecurity Hiring Modernization Act.
Section 3308 of title 5, United States Code, is amended—
by striking The Office of Personnel Management and inserting (a) In general.—Consistent with subsection (b), the Office of Personnel Management; and
by adding at the end the following:
With respect to any covered position—
an agency may prescribe a minimum educational requirement for employment in such a position only if a minimum education qualification is required by law to perform the duties of the position in the State or locality where the duties of the position are to be performed; and
an agency may consider education in determining a candidate’s satisfaction of any other minimum qualification only if the candidate’s education directly reflects the competencies necessary to satisfy that qualification and perform the duties of the position.
Not later than one year after the date of the enactment of the Cybersecurity Hiring Modernization Act and annually thereafter, the Office of Personnel Management shall publish on the Office’s website—
any changes made to minimum qualifications standards concerning education for covered positions; and
aggregate data indicating the level of educational attainment, sorted by position classification, of all accessions to covered positions.
In this subsection, the term covered position means—
any position in the competitive service classified under the GS–2210 information technology management series, or any successor series; and
any other position in the competitive service designated as cybersecurity under the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800–181), or successor framework.