Cybersecurity Policy Analyst

Parsons is hiring a Cybersecurity Policy Analyst to research, analyze, and translate cybersecurity requirements into clear, actionable policy guidance for a large cybersecurity organization. This onsite role in Maryland combines policy research, technical validation, and stakeholder coordination to strengthen cybersecurity governance across multiple security domains.

What you’ll do

• Research and analyze Federal, Air Force, Intelligence Community, and organizational cybersecurity policies, directives, instructions, manuals, and standards.
• Review existing cybersecurity policies, procedures, standard operating procedures, and program documentation for accuracy, currency, consistency, and compliance.
• Support policy development and revision across areas including information security, personnel security, physical security, industrial security, classified information and document control, operational security, controlled unclassified information, privacy and sensitive personnel information, and security awareness and training.
• Draft policy updates, implementation guidance, standard operating procedures, briefing materials, decision papers, and supporting documentation.
• Analyze proposed policy changes and assess operational, technical, compliance, workforce, and resource impacts.
• Identify gaps, conflicts, duplication, ambiguity, and inconsistencies among policies and procedures, then develop recommendations to improve program effectiveness.
• Monitor emerging cybersecurity threats, technologies, legal developments, regulations, and industry practices.
• Produce research summaries, policy analyses, issue papers, executive briefings, and leadership recommendations.
• Facilitate policy working groups, stakeholder reviews, coordination sessions, and approval meetings; coordinate with cybersecurity subject-matter experts to validate technical content.
• Track policy actions through comments, approvals, revisions, implementation milestones, and follow-up items.
• Support policy awareness, security training, and communications, and assist with compliance reviews, vulnerability assessments, inspections, corrective-action plans, and audit responses.
• Maintain policy repositories with version control and records in accordance with customer requirements.
• Represent analytical work and recommendations in customer meetings and stakeholder engagements, providing timely updates on policy risks, unresolved issues, dependencies, and required Government actions.
• Support continuous improvement of cybersecurity governance, risk management, and policy-management processes.

What you’ll bring

• TS/SCI clearance active/current for this position.
• 5+ years of experience with cybersecurity policy.
• Bachelor’s degree in cybersecurity, information assurance, information technology, public policy, political science, law, or related field; equivalent experience may be considered.
• Experience researching, interpreting, and applying cybersecurity policies, regulations, standards, or directives.
• Experience drafting or revising policies, procedures, standards, implementation guidance, or executive-level analytical products.
• Knowledge of cybersecurity governance, risk management, compliance, information security, and security-control concepts.
• Strong analytical, research, writing, editing, briefing, and stakeholder-engagement skills.
• Ability to communicate complex cybersecurity and policy issues to both technical and nontechnical audiences.
• Ability to manage multiple policy actions, deadlines, stakeholder comments, and competing priorities.
• Strong proficiency with Microsoft Word, PowerPoint, Excel, SharePoint, or comparable collaboration and documentation tools.

Desired skills

• Experience supporting Air Force, Intelligence Community, federal, law enforcement, or national-security customers.
• Familiarity with Government and Air Force cybersecurity and security guidance, including: DoD Directive 8140.01, DoD 8570.01-M, Risk Management Framework, NIST cybersecurity publications, Intelligence Community Directive 705, Controlled Unclassified Information requirements, Operational Security requirements, and Personnel and industrial security policies.
• Experience supporting policy reviews, security assessments, audits, inspections, or corrective-action programs.
• Experience with cybersecurity governance, risk, and compliance tools.
• Experience developing security awareness or policy training materials.
• Certification such as CISSP, CISM, Security+, CAP, CGRC, CIPP, PMP, or related credential.
• Graduate degree in cybersecurity, public policy, national security, law, or related field.

Compensation and location

Location: Maryland (onsite)

Salary: USD 88,400 - 154,700 per year

Benefits

• Medical
• Dental
• Vision
• Paid time off
• 401(k)
• Life insurance
• Flexible work schedules
• Holidays

Security clearance requirement

An active Top Secret SCI security clearance is required for this position.

Tools you’ll use: Microsoft Word, PowerPoint, Excel, SharePoint.