IAM CareConnect (EPIC) Security Analyst

OhioHealth Corporation; Ohio; Hybrid; USD 70,000 - 90,000; Full time

Job summary

OhioHealth Corporation in Ohio is seeking an Identity and Access Management Analyst to support daily security administration and access control across the enterprise. The role involves provisioning user access, building roles, and ensuring compliance with IAM standards.

The candidate will analyze access logs, prepare audit findings for management, and participate in go-lives, upgrades, and on-call duties as needed. A Bachelor's degree in Computer and Information Science is required.

Qualifications

• Bachelor's Degree in Computer and Information Science required.
• Experience with IAM is preferred.
• Ability to develop access roles and provisioning.

Responsibilities

• Perform daily security administration and manage customer access requests.
• Build and administer new IAM security roles and rules.
• Analyze access control logs and present audit findings.
• Facilitate identification and resolution of IAM security issues.
• Coordinate regular IAM system reviews to identify weaknesses and implement fixes.
• Maintain IAM process and application files for performance and integrity.
• Interpret threat warnings and coordinate reviews to mitigate risks.
• Define appropriate role-based access with management and maintain access matrices.
• Represent the IAM team in meetings and assist in incident resolution.
• Lead initiatives, meetings, and document follow-ups.

Skills

IAM

Security administration

Log analysis

Access control

Documentation

Education

Bachelor's Degree in Computer and Information Science

Tools

Provisioning tools

Job description

We are more than a health system. We are a belief system. We believe wellness and sickness are both part of a lifelong partnership, and that everyone could use an expert guide. We work hard, care deeply and reach further to help people uncover their own power to be healthy. We inspire hope. We learn, grow, and achieve more - in our careers and in our communities.

Job Description Summary:

Reports to the Identity and Access CareConnect Manager and will have no direct reports. The Identity and Access Management Analyst will be responsible for daily operational security administration and access control support to the OhioHealth Identity and Access Management (IAM) program. The Identity and Access Management Analyst supports security access control initiatives throughout the enterprise.

The Identity and Access Management Analyst acts as a resource for OhioHealth departments and business units on technical and/or operational security matters. The Identity and Access Management Analyst participates in the planning, development, and deployment of IAM access control standards and processes into production. The Identity and Access Management Analyst will develop supporting documentation for IAM procedures and processes. They will also evaluate and refine existing documentation. The Identity and Access Management Analyst analyzes user access needs, develop access roles and add/change/delete user access accordingly, through provisioning tool(s) or directly in system/application. The role will assist in special projects, such as application go-lives, upgrades, enhancements, and on-call responsibilities, etc. as needed.

Responsibilities And Duties:

• 15% Security Administration Perform daily systems security administration functions, including managing customer access requests; create, modify and/or delete customer profiles and accounts; reset passwords; and maintain appropriate documentation.
• 15% Build Roles Administer and build new security roles, classes and / or rules for IAM tool and / or appropriate systems or applications based on customer needs and compliance approval; maintain documentation accordingly.
• 15% Log Analysis Analyze and integrate access controls-specific log information, including operating system-level access logs. Perform event correlation as required. Interpret and present audit findings into clear, concise reports for EIS management.
• 10% Issue Resolution Facilitate the identification and resolution of IAM security issues or questions by involving identified OhioHealth associates and other stakeholders; elevate when appropriate.
• 10% Control Reviews Coordinate regular reviews of the IAM systems to identify real and/or potential security and/or access weaknesses. Based on findings, develop fixes / mitigations which meet enterprise and customer needs cost effectively and support our mission and patient care standards.
• 10% Process Maintenance Maintain process / application files in the various IAM computer systems to ensure maximum system performance and integrity.
• 10% Security Assessment and Mitigation Receive, research, and interpret identity proofing and / or security access threat warnings from internal tools, external activities, and outside sources/colleagues. Coordinate regular reviews of the IAM systems to identify real and/or potential security and/or access weaknesses. Based on findings, develop fixes / mitigations which meet enterprise and customer needs cost effectively and support our mission and patient care standards.
• 5% Business Analysis Working with Management, other IAM team members and business / clinical customers, define appropriate role-based access by job / professional responsibility and maintain on-going access matrix to support our corporate mission and patient care.
• 5% Be Subject Matter Expert Represent the IAM team in meetings and be able to identify issues as they relate to IAM and general Information Security. Serve as a Subject Matter Expert concerning IAM incident resolution and assist IAM team members in resolving tickets.
• 5% Lead Efforts Be able to lead initiatives, meetings, and document follow-ups. Create Status reports on projects, identify risks and issues, and document mitigation plans. The major duties/ responsibilities and listed above are not intended to be all-inclusive of the duties, responsibilities and to be performed by associates in this job. Associate is expected to all perform other duties as requested by supervisor.

As a High Reliability Organization (HRO), responsibilities require focus on safety, quality and efficiency in performing job duties.

The job profile provides an overview of responsibilities and duties and is not intended to be an exhaustive list and is subject to change at any time

Minimum Qualifications:

Bachelor's Degree: Computer and Information Science (Required)

Additional Job Description:

Degree or work experience above the minimum qualifications

Field of Study:

Computer Science, Business Administration/Management, Information