EHR Security Analyst/Technical Support Analyst 3 – Contract Position

BranCore Technologies; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

BranCore Technologies in Richmond, VA is seeking an IT Security professional to manage EHR access and security for Cerner/OHPAC environments on an 8-month contract. The role focuses on maintaining Millenium/OHPAC security positions and handling user provisioning, reviews, and offboarding according to policy.

The candidate will work with the EHR Security Officer and IT teams to strengthen security, perform audits, and ensure regulatory compliance. Richmond-area residency is required.

Qualifications

• Three plus years of IT experience in healthcare IT.
• Three plus years of experience with EHR security environments (Cerner/OHPAC).
• Understanding of HIPAA/HITECH and healthcare security regulations.
• Experience with Active Directory, SSO, MFA and identity management solutions.
• Strong analytical and troubleshooting skills related to security and access in EHR systems.
• Excellent communication and collaboration with IT, compliance, and end users.

Responsibilities

• Map and maintain EHR position definitions (Millenium/OHPAC) per client positions.
• Review and process EHR access requests following policies and RBAC.
• Create, modify, and terminate user access as approved.
• Monitor proper use of EHR access controls and roles.
• Collaborate with EHR Security Officer, IT teams, and EHR Core for provisioning/offboarding.
• Conduct internal security audits of EHR applications to identify risks.
• Develop and maintain security policies and guidelines for the Application.

Skills

Millenium/OHPAC security

EHR security

HIPAA/HITECH compliance

AD/SSO/MFA

Security incident response

Communication skills

P2Sentinel usage

Tools

P2Sentinel

Job description

Contract Length: 8 months with the possibility of extending based on project need.

Candidate residing in Richmond, VA area is required.

Key Responsibilities

• Map and maintaining EHR positions definitions, which includes, Millenium Positions, Preferences and OHPAC Security groups with client’s positions.
• Reviews and processes EHR access requests in accordance with established policies, procedures, organizational standards, and role-based access requirements.
• Creates, modifies, and terminates user access based on approved requests and established processes.
• Monitor and enforce appropriate use of EHR Access Control Positions and Policies, ensuring that users have the correct level of access based on their roles and their job functions.
• Work with EHR Security Officer, IT Technical team, Support Team and EHR Core team to help define and automate user provisioning and offboarding procedures.
• Monitor and conduct internal security audits of the EHR application to identify and mitigate risks and/or vulnerabilities detected.
• Work with EHR Security Officer to develop and maintain security policies, procedure and guidelines related to the Application.
• Work with EHR Security Officer and ISO Office and EHR Core team to define and complete security documentation and downtime procedures according with VDH Security guidelines.
• Work with EHR Security Officer to respond and investigate security incidents related to EHR Application ensuring timely resolution and proper reporting to stakeholders.
• Collaborate with the EHR implementation and optimization teams to ensure that security measures are integrated into the deployment of new features, updates, and third-party applications.
• Stay informed about emerging security threats, technologies, and best practices related to EHR systems.
• Recommend improvements and optimizations to the EHR security environment based on industry trends and emerging threats.
• Monitor user behavior by using tools like P2Sentinel to determine trends and possible incidents.
• Work with EHR Security Officer and EHR Core team to assist on internal and external audits.
• Participate in Cerner/OHPAC upgrades, security patches and system maintenance to ensure ongoing security.
• Participate in the Domain Strategy for EHR Application.
• Stay up to date with security updates, best practices and regulatory changes.

Required Experience

• Three plus years of IT experience.
• Three plus years of healthcare IT experience
• Strong understanding knowing of Millenium and OHPAC security positions required
• Strong Understanding of EHR Systems
• Understanding of HIPAA, HITECH, meaningful user and other healthcare security regulations.
• Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions.
• Strong analytical, problem-solving, and troubleshooting skills related to Cerner/OHPAC security and access issues.
• Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users.
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.
• Knowledge of Discern and ccl.

Required/Desired Skills

• Understanding knowing of Millenium and OHPAC security positions. Required, 3 Years
• Healthcare IT experience. Required, 3 Years
• IT experience. Highly desired, 3 Years
• Strong Understanding of EHR Systems, specifically OH/Cerner. Highly desired, 3 Years
• Understanding of HIPAA, HITECH, meaningful user and other healthcare security regulations
  Highly desired, 3 Months
• Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions. Highly desired, 3 Years
• Strong analytical, problem-solving, and troubleshooting skills related to Cerner/OHPAC security and access issues. Required, 3 Years
• Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users. Required, 3 Years
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security. Highly desired, 3 Years
• Knowledge of Discern and ccl. Required, 3 Years