Information Security Consultant

SynapOne; United States; Remote; USD 70,000 - 110,000; Full time

Job summary

Join a forward-thinking company as an EHR Compliance & Security Officer, where you'll play a crucial role in safeguarding electronic health records. In this dynamic position, you will ensure compliance with federal and state regulations, conduct security audits, and manage access controls. Collaborating with clinical and IT teams, you'll implement security measures and respond to incidents, making a significant impact on the healthcare sector. If you are passionate about IT security and eager to contribute to a vital industry, this is the perfect opportunity for you.

Qualifications

• 3-5 years of IT security experience, preferably in healthcare.
• Bachelor's degree or relevant certifications in IT or Cybersecurity.

Responsibilities

• Ensure EHR system compliance with HIPAA and other regulations.
• Conduct regular security audits and manage access controls.

Skills

IT Security

HIPAA Compliance

Risk Management

Problem-Solving

Analytical Skills

Communication Skills

Education

Bachelor’s degree in Information Technology

Security Certifications (CISSP, CISM, HCISPP)

Tools

EHR Systems

Firewalls

Intrusion Detection/Prevention Systems

Data Encryption

Job description

Job Title: EHR Compliance & Security Officer

Location: 100% Remote

Description:

Security Management & Compliance:

1. Ensure the EHR system is secure and compliant with federal, state, and organizational security policies, including HIPAA, HITECH, and other applicable regulations.
2. Monitor and enforce the appropriate use of EHR access controls, ensuring that users have the correct level of access based on their roles.
3. Conduct regular security audits of the EHR system, identifying and mitigating risks or vulnerabilities.
4. Develop and maintain security policies, procedures, and guidelines specific to the EHR environment.
5. Coordinate with the stakeholders to implement and maintain security tools, such as firewalls, intrusion detection/prevention systems, and encryption mechanisms, as applicable to the EHR system.

Access Controls & User Management:

1. Oversee user provisioning and de-provisioning, ensuring appropriate access to the system for all employees and contractors.
2. Manage and audit role-based access controls (RBAC) for the system, ensuring that users have the correct level of access for their duties.
3. Ensure that system logs and user access records are maintained for auditing purposes, and work with internal audit teams to ensure compliance.
4. Respond to and investigate security incidents related to the EHR system, ensuring timely resolution and proper reporting to relevant stakeholders.
5. Perform risk assessments on new modules or integrations within the EHR, identifying potential security vulnerabilities and developing mitigation strategies.
6. Coordinate with clinical, IT, and legal teams on breach notification processes in compliance with regulatory requirements.
7. Collaborate with the EHR implementation and optimization teams to ensure that security measures are integrated into the deployment of new features, updates, and third-party applications.
8. Work closely with other members of the IT security team to ensure alignment between EHR security and overall organizational cybersecurity strategies.
9. Participate in governance and compliance meetings, offering insights and reports on EHR security.

Qualifications:

1. Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field. Relevant work experience may substitute for formal education.
2. Security Certifications (e.g., CISSP, CISM, HCISPP) are highly desirable.
3. 3-5 years of experience in IT security, preferably within the healthcare industry.
4. Prior experience with EHR systems is preferred.
5. Experience with HIPAA compliance, healthcare IT security audits, and risk management.
6. Knowledge of role-based access control (RBAC), identity management, and data encryption as it relates to healthcare information systems.
7. Strong understanding of EHR systems.
8. Proficient in healthcare regulations and standards, including HIPAA, HITECH, and meaningful use.
9. Excellent problem-solving and analytical skills.
10. Strong communication skills, capable of working across departments and with clinical teams.
11. Ability to manage security incidents and respond to them efficiently.
12. Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology, Analyst, and Consulting

Industries

Hospitals and Health Care, Public Health, and Health and Human Services