Are there published guidelines for this, or is it more that you negotiate with a hiring manager?
There’s no negotiation though, either the billet is part of the program (CISA calls their CTMS) or it’s not, and either you check the box (usually with a certification) or you don’t.
Edit: found this on their site.