Hybrid EHR Security & Access Analyst

Smart IMS Inc; Richmond (VA); Hybrid; USD 34,000 - 48,000; Full time

Job summary

Smart IMS Inc. is seeking an EHR Security Analyst to support security, access, and provisioning for the Cerner EHR environment in a hybrid Richmond, VA setting. The role involves configuring security, managing user access, and coordinating with IT, privacy, and compliance teams.

Responsibilities include RBAC enforcement, auditing access, and assisting with security controls and incident response. Prior healthcare IT and EHR experience, especially with Cerner/OHPAC, is preferred.

Qualifications

• Three+ years of IT experience.
• Three+ years of healthcare IT experience.
• Strong understanding of Millenium and OHPAC security positions.
• Understanding of HIPAA, HITECH, meaningful use, and other healthcare security regulations.
• Experience with AD, SSO, MFA, and identity management solutions.

Responsibilities

• Map and maintain EHR positions definitions, including Millenium Positions, Preferences and OHPAC Security groups with Client Positions.
• Review and process EHR access requests per policies and RBAC requirements.
• Create, modify, and terminate user access based on approved requests.
• Monitor and enforce appropriate use of EHR Access Control Positions and Policies.
• Collaborate with EHR Security Officer, IT teams, and HIPAA/compliance to ensure policies and procedures are followed.
• Assist with internal security audits and remediation of findings.
• Assist with security documentation and downtime procedures per client guidelines.
• Respond to and report security incidents related to the EHR application.

Skills

IT experience

Healthcare IT

HIPAA compliance

EHR security

Active Directory

SSO

MFA

P2Sentinel

Cerner/OHPAC security

Communication

Tools

Active Directory

SSO

MFA

P2Sentinel

Discern

CCL

Job description

Smart IMS Inc. is seeking an EHR Security Analyst to support security, access, and provisioning for the Cerner EHR environment in a hybrid Richmond, VA setting. The role involves configuring security, managing user access, and coordinating with IT, privacy, and compliance teams.

Responsibilities include RBAC enforcement, auditing access, and assisting with security controls and incident response. Prior healthcare IT and EHR experience, especially with Cerner/OHPAC, is preferred.