Cybersecurity Policy Analyst

In a world of possibilities, pursue one with endless opportunities. Imagine Next!

At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

Parsons is seeking a Cybersecurity Policy Analyst to support a high-visibility cybersecurity mission. This position will help research, analyze, interpret, develop, and implement cybersecurity policies, procedures, standards, and guidance for a large cybersecurity organization.

The Cybersecurity Policy Analyst will work closely with customer leadership, cybersecurity subject-matter experts, security professionals, and Government stakeholders to evaluate complex policy issues and translate regulatory and organizational requirements into clear, practical, and actionable guidance. The successful candidate will monitor emerging cybersecurity trends, assess their potential impact, and develop well-supported recommendations that strengthen the organization’s security posture and mission effectiveness.

This is an excellent opportunity for a policy professional who combines cybersecurity knowledge, strong analytical skills, and exceptional written and verbal communication abilities.

You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

What You'll Be Doing:

• Research and analyze Federal, Air Force, Intelligence Community, and organizational cybersecurity policies, directives, instructions, manuals, and standards.
• Review existing cybersecurity policies, procedures, standard operating procedures, and program documentation for accuracy, currency, consistency, and compliance.
• Support policy development and revision across areas such as:
  • Information security
  • Personnel security
  • Physical security
  • Industrial security
  • Classified information and document control
  • Operational security
  • Controlled Unclassified Information
  • Privacy and sensitive personnel information
  • Security awareness and training
• Draft policy updates, implementation guidance, standard operating procedures, briefing materials, decision papers, and other supporting documentation.
• Analyze proposed policy changes and identify operational, technical, compliance, workforce, and resource impacts.
• Identify gaps, conflicts, duplication, ambiguity, and inconsistencies among policies and procedures.
• Develop recommendations for resolving policy issues and improving program effectiveness.
• Monitor emerging cybersecurity threats, technologies, legal developments, regulations, and industry practices.
• Prepare research summaries, policy analyses, issue papers, executive briefings, and leadership recommendations.
• Facilitate policy working groups, stakeholder reviews, coordination sessions, and approval meetings.
• Coordinate with cybersecurity subject-matter experts to validate technical content and ensure proposed policies are practical and implementable.
• Track policy actions, comments, approvals, revisions, implementation milestones, and required follow-up.
• Support the development and delivery of policy awareness, security training, and communications.
• Assist with compliance reviews, vulnerability assessments, inspections, corrective-action plans, and audit responses.
• Maintain policy repositories, version control, records, and documentation in accordance with customer requirements.
• Represent the contractor’s analytical work and recommendations in customer meetings, forums, and stakeholder engagements.
• Provide timely updates on policy risks, unresolved issues, dependencies, and Government actions required.
• Support continuous improvement of cybersecurity governance, risk management, and policy-management processes.

What Required Skills You'll Bring:

• TS/SCI clearance active/current
• 5+ years of experience with cybersecurity policy
• Bachelor’s degree in cybersecurity, information assurance, information technology, public policy, political science, law, business, or a related field; equivalent experience may be considered.
• Experience researching, interpreting, and applying cybersecurity policies, regulations, standards, or directives.
• Experience drafting or revising policies, procedures, standards, implementation guidance, or executive-level analytical products.
• Knowledge of cybersecurity governance, risk management, compliance, information security, and security-control concepts.
• Strong analytical, research, writing, editing, briefing, and stakeholder-engagement skills.
• Ability to communicate complex cybersecurity and policy issues to technical and nontechnical audiences.
• Ability to manage multiple policy actions, deadlines, stakeholder comments, and competing priorities.
• Strong proficiency with Microsoft Word, PowerPoint, Excel, SharePoint, or comparable collaboration and documentation tools.

What Desired Skills You'll Bring:

• Experience supporting Air Force, Intelligence Community, federal, law enforcement, or national-security customers.
• Familiarity with Government and Air Force cybersecurity and security guidance, including:
  • DoD Directive 8140.01
  • DoD 8570.01-M
  • Risk Management Framework
  • NIST cybersecurity publications
  • Intelligence Community Directive 705
  • Controlled Unclassified Information requirements
  • Operational Security requirements
  • Personnel and industrial security policies
• Experience supporting policy reviews, security assessments, audits, inspections, or corrective-action programs.
• Experience with cybersecurity governance, risk, and compliance tools.
• Experience developing security awareness or policy training materials.
• Certification such as CISSP, CISM, Security+, CAP, CGRC, CIPP, PMP, or a related credential.
• Graduate degree in cybersecurity, public policy, national security, law, or a related field.

Security Clearance Requirement:

An active Top Secret SCI security clearance is required for this position.​This position is part of our Federal Solutions team.The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.Salary Range: $88,400.00 - $154,700.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to .