EHR Security Analyst – Cerner Specialist

DKMRBH Inc; Richmond (VA); On-site; USD 90,000 - 110,000; Full time

Job summary

DKMRBH Inc. is seeking an experienced EHR Security Analyst to support security, access management, and provisioning within a Cerner Millennium environment in Richmond, VA. Local candidates and face‑to‑face interviews are required.

The role collaborates with the EHR Application Team, ISO and HIPAA stakeholders to ensure robust access controls, security practices, and regulatory compliance across the EHR landscape.

Qualifications

• 3+ years of IT experience in healthcare settings.
• Strong knowledge of EHR systems and healthcare application security.
• Experience with Cerner Millennium and/or OHPAC security.
• Understanding HIPAA/HITECH and healthcare security requirements.
• Experience with AD, SSO, MFA and identity management.

Responsibilities

• Manage and maintain EHR user access, security policies and RBAC.
• Map EHR positions, Cerner Millennium Positions and OHPAC Groups.
• Monitor use of EHR access positions based on roles and duties.
• Define and automate user provisioning and offboarding processes.
• Investigate and troubleshoot EHR security and access issues.
• Monitor user activity to identify security risks and incidents.
• Utilize tools like P2Sentinel for security investigations.
• Conduct internal security reviews and assist audits.
• Develop EHR security policies, procedures and guidelines.
• Collaborate on Cerner/OHPAC upgrades and security patches.

Skills

3+ years IT experience

Healthcare IT experience

Tools

Cerner Millennium

OHPAC security

Active Directory

SSO

MFA

Discern

CCL

Job description

DKMRBH Inc. is seeking an experienced EHR Security Analyst to support security, access management, and provisioning within a Cerner Millennium environment in Richmond, VA. Local candidates and face‑to‑face interviews are required.

The role collaborates with the EHR Application Team, ISO and HIPAA stakeholders to ensure robust access controls, security practices, and regulatory compliance across the EHR landscape.