EHR Security Analyst - Hybrid

Smart IMS Inc; Richmond (VA); Hybrid; USD 34,000 - 48,000; Full time

Job summary

Smart IMS Inc. is seeking an EHR Security Analyst to support security, access, and provisioning for the Cerner EHR environment in a hybrid Richmond, VA setting. The role involves configuring security, managing user access, and coordinating with IT, privacy, and compliance teams.

Responsibilities include RBAC enforcement, auditing access, and assisting with security controls and incident response. Prior healthcare IT and EHR experience, especially with Cerner/OHPAC, is preferred.

Qualifications

• Three+ years of IT experience.
• Three+ years of healthcare IT experience.
• Strong understanding of Millenium and OHPAC security positions.
• Understanding of HIPAA, HITECH, meaningful use, and other healthcare security regulations.
• Experience with AD, SSO, MFA, and identity management solutions.

Responsibilities

• Map and maintain EHR positions definitions, including Millenium Positions, Preferences and OHPAC Security groups with Client Positions.
• Review and process EHR access requests per policies and RBAC requirements.
• Create, modify, and terminate user access based on approved requests.
• Monitor and enforce appropriate use of EHR Access Control Positions and Policies.
• Collaborate with EHR Security Officer, IT teams, and HIPAA/compliance to ensure policies and procedures are followed.
• Assist with internal security audits and remediation of findings.
• Assist with security documentation and downtime procedures per client guidelines.
• Respond to and report security incidents related to the EHR application.

Skills

IT experience

Healthcare IT

HIPAA compliance

EHR security

Active Directory

SSO

MFA

P2Sentinel

Cerner/OHPAC security

Communication

Tools

Active Directory

SSO

MFA

P2Sentinel

Discern

CCL

Job description

Job Title: EHR Security Analyst - Hybrid

Duration (Contract): 9 Months

Client Location: Richmond, VA 23219

Location Preference: Hybrid

Job Description:

• As an EHR Security Analyst, you will be responsible for supporting the security, access, and user provisioning requirements of the Electronic Health Record (EHR) environment along with providing support tier 1 to the EHR end users on related areas.
• This position provides technical and functional support for EHR security configuration, user access, security roles, authentication, auditing, and access-related troubleshooting. The Security Analyst works with clinical, operational, information technology, privacy, compliance, and application support teams to ensure users have appropriate access to EHR applications based on their job responsibilities and organizational policies.
• The EHR Security Support Analyst provides technical and functional security support for the Cerner Electronic Health Record environment. This role is responsible for maintaining appropriate user access, supporting security configuration, monitoring access-related activities, troubleshooting security issues, and assisting with the implementation and sustainment of EHR security controls.
• The EHR security Support Analyst is responsible for managing and help define user access policies, security policies, and role-based permissions within the EHR. This role will work closely with the EHR Application team, ISO Team, and HIPAA compliance officer among others to ensure that the application is compliance with HIPAA standards, organizational security policies, and best practices.

Responsibilities:

• Map and maintaining EHR positions definitions, which includes, Millenium Positions, Preferences and OHPAC Security groups with Client Positions.
• Reviews and processes EHR access requests in accordance with established policies, procedures, organizational standards, and role-based access requirements.
• Creates, modifies, and terminates user access based on approved requests and established processes.
• Monitor and enforce appropriate use of EHR Access Control Positions and Policies, ensuring that users have the correct level of access based on their roles and their job functions.
• Work with EHR Security Officer, IT Technical team, Support Team, and EHR Core team to help define and automate user provisioning and offboarding procedures.
• Monitor and conduct internal security audits of the EHR application to identify and mitigate risks and/or vulnerabilities detected.
• Work with EHR Security Officer to develop and maintain security policies, procedure and guidelines related to the Application.
• Work with EHR Security Officer and ISO Office and EHR Core team to define and complete security documentation and downtime procedures according with Client Security guidelines.
• Work with EHR Security Officer to respond and investigate security incidents related to EHR Application ensuring timely resolution and proper reporting to stakeholders.
• Collaborate with the EHR implementation and optimization teams to ensure that security measures are integrated into the deployment of new features, updates, and third-party applications.
• Stay informed about emerging security threats, technologies, and best practices related to EHR systems.
• Recommend improvements and optimizations to the EHR security environment based on industry trends and emerging threats.
• Monitor user behavior by using tools like P2Sentinel to determine trends and possible incidents.
• Work with EHR Security Officer and EHR Core team to assist on internal and external audits.
• Participate in Cerner/OHPAC upgrades, security patches, and system maintenance to ensure ongoing security.
• Participate in the Domain Strategy for EHR Application.
• Stay up to date with security updates, best practices, and regulatory changes.

Required Skills, Experiences, Education and Competencies:

• Three plus years of IT experience.
• Three plus years of healthcare IT experience
• Strong understanding knowing of Millenium and OHPAC security positions required
• Strong Understanding of EHR Systems
• Understanding of HIPAA, HITECH, meaningful user, and other healthcare security regulations.
• Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication(MFA), and identity management solutions.
• Strong analytical, problem-solving, and troubleshooting skills related to Cerner/OHPAC security and access issues.
• Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users.
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.
• Knowledge of Discern and ccl.

The hourly range for roles of this nature are $25.00 to $35.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.