H.R. 5000 — Cybersecurity Hiring Modernization Act

This section limits agencies' authority to prescribe minimum educational requirements for covered cybersecurity positions in the competitive service. For such positions—defined as those in the GS–2210 information technology management series (or successor) or designated as cybersecurity under the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (NIST Special Publication 800–181, or successor)—agencies (1) may impose a minimum educational requirement only if required by state or local law to perform the position's duties in that location; and (2) may consider education toward other minimum qualifications only if it directly reflects competencies needed for the position. (Thus, the changes prioritize skills and experience over formal education unless legally mandated.) The section further requires the Office of Personnel Management to publish on its website, not later than one year after enactment and annually thereafter, changes to relevant qualification standards and aggregate data on educational attainment of hires to covered positions, sorted by position classification.