Associate Epic IT Security Specialist

adventhealth; Orlando (FL); On-site; USD 60,151 - 111,886; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

PTO from Day One

403-B Retirement Plan

Job summary

AdventHealth is seeking a security-focused professional to safeguard patient and hospital data acrossEpic environments. You will implement access controls, monitor PHI/PII protections, and ensure SOX compliance while collaborating with IT and clinical teams.

This role requires Epic security certification within 3 months, strong knowledge of HIPAA/HITECH/SOX, and experience with identity management and alerting. On-site Florida posting with 24/7 on-call coverage.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Health Informatics, Computer Science, or related field.
• Experience in healthcare IT, identity and access management, or application security.
• Epic environment experience strongly preferred.

Responsibilities

• Protect data assets, PHI, and PII; ensure SOX compliance.
• Monitor and audit user access; enforce least-privilege and separation of duties.
• Develop security strategies; train staff on policies and best practices.
• Respond to security incidents and maintain documentation.
• Collaborate with stakeholders to maintain security standards.

Skills

Epic security

Access control

Security platforms

HIPAA/HITECH/SOX

HITRUST knowledge

Analytical skills

Team collaboration

Communication

Education

Bachelor's degree in IT/Security/CS

Tools

Active Directory

Identity Management

Epic

Job description

Our promise to you:

Joining AdventHealth is about being part of something bigger. It’s about belonging to a community that believes in the wholeness of each person, and serves to uplift others in body, mind and spirit. AdventHealth is a place where you can thrive professionally, and grow spiritually, by Extending the Healing Ministry of Christ. Where you will be valued for who you are and the unique experiences you bring to our purpose‑minded team. All while understanding that together we are even better.

All the benefits and perks you need for you and your family:

• Benefits from Day One: Medical, Dental, Vision Insurance, Life Insurance, Disability Insurance
• Paid Time Off from Day One
• 403-B Retirement Plan
• 4 Weeks 100% Paid Parental Leave
• Career Development
• Whole Person Well-being Resources
• Mental Health Resources and Support
• Pet Benefits

Schedule:

Full time

Shift:

Day (United States of America)

Address:

900 HOPE WAY

City:

ALTAMONTE SPRINGS

State:

Florida

Postal Code:

32714

Job Description:

Understands and applies technology tools, systems, policies, and processes to protect data assets, PHI, and PII. Ensures compliance with the Sarbanes‑Oxley Act (SOX). Develops and implements strategies to safeguard sensitive information. Monitors and audits user access to ensure compliance, data protection, and enforcement of separation of duties. Identifies and mitigates security risks related to data assets, PHI, and PII. Collaborates with internal and external stakeholders to maintain security standards. Provides staff training on security policies, access procedures, and best practices. Conducts regular reviews and updates of security protocols. Responds to security incidents and breaches promptly and effectively. Maintains documentation of security measures and compliance efforts. Utilizes encryption and other security technologies to protect data. Ensures access controls are properly implemented and maintained. Participates in a 24/7 rotating on‑call schedule for support coverage. Other duties as assigned.

Knowledge, Skills, and Abilities:

• Epic proficiency with honors, certification, accreditation or ability to complete certification within 3 months of completing classes. [Required]
• Knowledge of methods of access control to applications/systems, including role‑based, rule‑based, attribute‑based, and management of exceptions. [Required]
• Supported multiple security platforms using various user interfaces. [Required]
• Basic knowledge of HIPAA, HITECH, PCI and SOX regulations as it pertains to application access controls [Required]
• Basic knowledge of security frameworks including HITRUST. [Required]
• Aptitude to quickly learn new systems with little or no documentation. [Required]
• Strong interpersonal skills with a positive and enthusiastic “can do” attitude. [Required]
• Demonstrates creative problem‑solving approach and strong analytical skills. [Required]
• Comfortable working independently with general direction and in a team setting. [Required]
• Excellent change management, oral and written communication, time management and project management skills. [Required]
• Create, maintain and communicate organized documentation. [Required]
• Applies best practice techniques in troubleshooting, testing, and quality assurance. [Required]
• Ability to travel occasionally as needed to support project implementation and assist with assessment of local workflow processes as needed. [Required]
• In order to support and maintain the technology systems and services in our hospitals, must have the ability to receive calls and text messages 24 hours a day, seven days per week. [Required]
• Application security training and experience in EPIC, Cerner, Active Directory, Identity Management, another major EHR system, or other major system architecture. [Preferred]
• Knowledge of security requirements specific to Healthcare including HIPAA, HITECH, and SOX. [Preferred]
• Knowledge of security frameworks including HITRUST, ISO, and NIST. [Preferred]
• Knowledge of Microsoft suite of products. [Preferred]
• Working knowledge of healthcare or clinical physician clinical practice. [Preferred]
• Ability to work well with people of varying levels of technical abilities. [Preferred]
• Fundamental knowledge of SQL queries. [Preferred]

Education

• Bachelor's degree from an accredited institution in Information Technology, Information Security, Health Informatics, Computer Science, or a related field.
• Equivalent combination of accredited coursework and progressive experience may be considered in place of a degree.

Experience (related field)

• Minimum 3 years of hands‑on experience in healthcare IT, identity and access management, or application security, with direct work in an Epic environment strongly preferred.
• Demonstrated experience administering role‑based access, security classes, sub‑templates, and user provisioning at enterprise scale.
• Experience supporting security operations in an environment subject to HIPAA and audit requirements.

Certification

• Active Epic security certification (Security & Classroom, or the module‑specific certification aligned to this role) is required within 3 months of hire. Sponsorship and training time are provided; failure to certify within the window is grounds for review of continued employment.
• Existing Epic certification at time of application is preferred and may offset the experience requirement.

Technical and functional skills

• Working knowledge of RBAC principles, least‑privilege design, and segregation‑of‑duties enforcement.
• Familiarity with audit tooling, access recertification, and break‑the‑glass workflows.
• Ability to translate operational and clinical access needs into secure, maintainable Epic security build.

Preferred

• Prior experience in a large multi‑facility health system (10k+ Epic users).
• Security certifications such as Security+, CISSP, or CISM.

Physical Requirements:

Physical Requirements - https://tinyurl.com/23km2677

Pay Range:

$60,151.66 - $111,886.39

Background Screening Requirement (Florida Law)

Certain positions are subject to Florida Level 2 background screening, including fingerprinting, as required by state law.

Applicants may review general information about Florida’s background screening requirements at the Florida Care Provider Background Screening Clearinghouse: https://info.flclearinghouse.com/

This facility is an equal opportunity employer and complies with federal, state and local anti-discrimination laws, regulations and ordinances.