Remote EHR Security Lead - HIPAA & Risk, 3-5 yrs

Focused HR Solutions, LLC; Trenton (NJ); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Focused HR Solutions, LLC is seeking a Sr IT Security Specialist with healthcare experience to oversee EHR security, manage access controls, and conduct security audits. The role collaborates with IT, clinical, and compliance teams to safeguard patient data and ensure HIPAA/HITECH compliance.

Responsibilities include developing security policies, coordinating with stakeholders on security tools, and handling incident response.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field; relevant work experience may substitute for formal education.
• Security Certifications (CISSP, CISM, HCISPP) are highly desirable.
• 3-5 years of IT security experience, preferably in healthcare.
• Experience with HIPAA compliance, healthcare IT security audits, and risk management.

Responsibilities

• Ensure EHR system security and compliance with HIPAA, HITECH, and applicable regulations.
• Monitor and enforce RBAC and access controls based on roles.
• Conduct regular security audits and mitigate risks or vulnerabilities in the EHR system.
• Develop and maintain security policies, procedures, and guidelines for the EHR environment.
• Coordinate with stakeholders to implement security tools (firewalls, IDS/IPS, encryption).
• Oversee user provisioning/de-provisioning and audit access records for compliance.
• Respond to security incidents and coordinate reporting to stakeholders.
• Perform risk assessments on new modules or integrations within the EHR system.

Skills

EHR systems

HIPAA/HITECH

Analytical skills

Communication

Incident response

Healthcare IT infrastructure

Education

Bachelor's degree in IT/CS/Cybersecurity

Job description

Focused HR Solutions, LLC is seeking a Sr IT Security Specialist with healthcare experience to oversee EHR security, manage access controls, and conduct security audits. The role collaborates with IT, clinical, and compliance teams to safeguard patient data and ensure HIPAA/HITECH compliance.

Responsibilities include developing security policies, coordinating with stakeholders on security tools, and handling incident response.