Cybersecurity Policy Analyst

Parsons Corporation•Linthicum, MD

6d•$88,400 - $154,700

About The Position

Parsons is seeking a Cybersecurity Policy Analyst to support a high-visibility cybersecurity mission. This position will help research, analyze, interpret, develop, and implement cybersecurity policies, procedures, standards, and guidance for a large cybersecurity organization. The Cybersecurity Policy Analyst will work closely with customer leadership, cybersecurity subject-matter experts, security professionals, and Government stakeholders to evaluate complex policy issues and translate regulatory and organizational requirements into clear, practical, and actionable guidance. The successful candidate will monitor emerging cybersecurity trends, assess their potential impact, and develop well-supported recommendations that strengthen the organization’s security posture and mission effectiveness. This is an excellent opportunity for a policy professional who combines cybersecurity knowledge, strong analytical skills, and exceptional written and verbal communication abilities. You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

Requirements

TS/SCI clearance active/current
5+ years of experience with cybersecurity policy
Bachelor’s degree in cybersecurity, information assurance, information technology, public policy, political science, law, business, or a related field; equivalent experience may be considered.
Experience researching, interpreting, and applying cybersecurity policies, regulations, standards, or directives.
Experience drafting or revising policies, procedures, standards, implementation guidance, or executive-level analytical products.
Knowledge of cybersecurity governance, risk management, compliance, information security, and security-control concepts.
Strong analytical, research, writing, editing, briefing, and stakeholder-engagement skills.
Ability to communicate complex cybersecurity and policy issues to technical and nontechnical audiences.
Ability to manage multiple policy actions, deadlines, stakeholder comments, and competing priorities.
Strong proficiency with Microsoft Word, PowerPoint, Excel, SharePoint, or comparable collaboration and documentation tools.

Nice To Haves

Experience supporting Air Force, Intelligence Community, federal, law enforcement, or national-security customers.
Familiarity with Government and Air Force cybersecurity and security guidance, including: DoD Directive 8140.01, DoD 8570.01-M, Risk Management Framework, NIST cybersecurity publications, Intelligence Community Directive 705, Controlled Unclassified Information requirements, Operational Security requirements, Personnel and industrial security policies.
Experience supporting policy reviews, security assessments, audits, inspections, or corrective-action programs.
Experience with cybersecurity governance, risk, and compliance tools.
Experience developing security awareness or policy training materials.
Certification such as CISSP, CISM, Security+, CAP, CGRC, CIPP, PMP, or a related credential.
Graduate degree in cybersecurity, public policy, national security, law, or a related field.

Responsibilities

Research and analyze Federal, Air Force, Intelligence Community, and organizational cybersecurity policies, directives, instructions, manuals, and standards.
Review existing cybersecurity policies, procedures, standard operating procedures, and program documentation for accuracy, currency, consistency, and compliance.
Support policy development and revision across areas such as: Information security, Personnel security, Physical security, Industrial security, Classified information and document control, Operational security, Controlled Unclassified Information, Privacy and sensitive personnel information, Security awareness and training.
Draft policy updates, implementation guidance, standard operating procedures, briefing materials, decision papers, and other supporting documentation.
Analyze proposed policy changes and identify operational, technical, compliance, workforce, and resource impacts.
Identify gaps, conflicts, duplication, ambiguity, and inconsistencies among policies and procedures.
Develop recommendations for resolving policy issues and improving program effectiveness.
Monitor emerging cybersecurity threats, technologies, legal developments, regulations, and industry practices.
Prepare research summaries, policy analyses, issue papers, executive briefings, and leadership recommendations.
Facilitate policy working groups, stakeholder reviews, coordination sessions, and approval meetings.
Coordinate with cybersecurity subject-matter experts to validate technical content and ensure proposed policies are practical and implementable.
Track policy actions, comments, approvals, revisions, implementation milestones, and required follow-up.
Support the development and delivery of policy awareness, security training, and communications.
Assist with compliance reviews, vulnerability assessments, inspections, corrective-action plans, and audit responses.
Maintain policy repositories, version control, records, and documentation in accordance with customer requirements.
Represent the contractor’s analytical work and recommendations in customer meetings, forums, and stakeholder engagements.
Provide timely updates on policy risks, unresolved issues, dependencies, and Government actions required.
Support continuous improvement of cybersecurity governance, risk management, and policy-management processes.