Cybersecurity Policy Analyst

Parsons is hiring a Cybersecurity Policy Analyst to research, analyze, and translate cybersecurity requirements into clear, actionable policy guidance for a large cybersecurity organization. This onsite role in Maryland combines policy research, technical validation, and stakeholder coordination to strengthen cybersecurity governance across multiple security domains.

• Research and analyze Federal, Air Force, Intelligence Community, and organizational cybersecurity policies, directives, instructions, manuals, and standards.
• Review existing cybersecurity policies, procedures, standard operating procedures, and program documentation for accuracy, currency, consistency, and compliance
  .
• Support policy development and revision across areas including information security, personnel security, physical security, industrial security, classified information and document control, operational security, controlled unclassified information, privacy and sensitive personnel information, and security awareness and training
  .
• Draft policy updates, implementation guidance, standard operating procedures, briefing materials, decision papers, and supporting documentation.
• Analyze proposed policy changes and assess operational, technical, compliance, workforce, and resource impacts.
• Identify gaps, conflicts, duplication, ambiguity, and inconsistencies among policies and procedures, then develop recommendations to improve program effectiveness.
• Monitor emerging cybersecurity threats, technologies, legal developments, regulations, and industry practices.
• Produce research summaries, policy analyses, issue papers, executive briefings, and leadership recommendations.
• Facilitate policy working groups, stakeholder reviews, coordination sessions, and approval meetings; coordinate with cybersecurity subject‑matter experts to validate technical content.
• Track policy actions through comments, approvals, revisions, implementation milestones, and follow‑up items.
• Support policy awareness, security training, and communications, and assist with compliance reviews, vulnerability assessments, inspections, corrective‑action plans, and audit responses.
• Maintain policy repositories with version control and records in accordance with customer requirements.
• Represent analytical work and recommendations in customer meetings and stakeholder engagements, providing timely updates on policy risks, unresolved issues, dependencies, and required Government actions.
• Support continuous improvement of cybersecurity governance, risk management, and policy‑management processes.

• TS/SCI clearance active/current for this position.
• 5+ years of experience with cybersecurity policy.
• Bachelor’s degree in cybersecurity, information assurance, information technology, public policy, political science, law
  , or related field;
  equivalent experience may be considered
  .
• Experience researching, interpreting, and applying cybersecurity policies, regulations, standards, or directives.
• Experience drafting or revising policies, procedures, standards, implementation guidance, or executive‑level analytical products.
• Knowledge of cybersecurity governance, risk management, compliance, information security, and security‑control concepts.
• Strong analytical, research, writing, editing, briefing, and stakeholder‑engagement skills.
• Ability to communicate complex cybersecurity and policy issues to both technical and nontechnical audiences.
• Ability to manage multiple policy actions, deadlines, stakeholder comments, and competing priorities.
• Strong proficiency with Microsoft Word, PowerPoint, Excel, Share Point , or comparable collaboration and documentation tools.

• Experience supporting Air Force, Intelligence Community, federal, law enforcement, or…