VDH Technical Support Analyst 3 (Hybrid)

Betis Group, Inc.; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Virginia Department of Health (VDH) is seeking an EHR Security Analyst to shape security profiles, access controls, and role-based permissions within the EHR. You will collaborate with the EHR Application team, ISO, and HIPAA compliance to ensure regulatory compliance.

You will manage user access policies, support Tier 1 for end users, and participate in audits and security upgrades for Cerner/OHPAC. This role emphasizes policy development, threat awareness, and proactive security management.

Qualifications

• Strong understanding of EHR systems and security requirements.
• Experience with HIPAA/HITECH, Meaningful Use, and healthcare security regulations.
• Experience with AD, SSO, MFA, and identity management solutions.
• Familiarity with Cerner/OHPAC security and access issues.
• Excellent communication and collaboration with IT, compliance and users.

Responsibilities

• Map and maintain EHR position definitions, including security groups and positions.
• Monitor and enforce EHR access controls based on roles and job functions.
• Define user provisioning and offboarding procedures with IT teams.
• Conduct internal security audits to identify risks and vulnerabilities.
• Develop and maintain security policies, procedures, and guidelines.
• Prepare security documentation and downtime procedures per VDH guidelines.

Skills

EHR security

HIPAA/HITECH compliance

AD/SSO/MFA

Cerner/OHPAC security

Communication & teamwork

Networking & security

Discern & CCL knowledge

Analytical problem solving

Multitasking in fast-paced env

Tools

Active Directory (AD)

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

Identity management solutions

Job description

Job Description

The Virginia Department of Health (VDH) enterprise level EHR Security Analyst will be responsible for providing help shaping the security profiles and access controls for the EHR along with providing support Tier 1 to the EHR end users on related areas. The EHR Security Analyst is responsible for managing and help define user access policies, security policies and role-based permissions within the EHR. This role will work closely with the EHR Application team, ISO Team and HIPAA compliance officer among others to ensure that the application is compliance with HIPAA standards, organizational security policies and best practices.

EHR Security Analyst/ Application Support Specialist

The EHR Security Analyst is responsible for managing and help define user access policies, security policies and role-based permissions within the EHR. This role will work closely with the EHR Application team, ISO Team and HIPAA compliance officer among others to ensure that the application is compliance with HIPAA standards, organizational security policies and best practices.

Key Responsibilities

• Map and maintaining EHR positions definitions, which includes, Millenium Positions, Preferences and OHPAC Security groups with VDH Positions.
• Monitor and enforce appropriate use of EHR Access Control Positions and Policies, ensuring that users have the correct level of access based on their roles and their job functions.
• Work with EHR Security Officer, IT Technical team, Support Team and EHR Core team to help define and automate user provisioning and offboarding procedures.
• Monitor and conduct internal security audits of the EHR application to identify and mitigate risks and/or vulnerabilities detected.
• Work with EHR Security Officer to develop and maintain security policies, procedure and guidelines related to the Application.
• Work with EHR Security Officer and ISO Office and EHR Core team to define and complete security documentation and downtime procedures according with VDH Security guidelines.
• Work with EHR Security Officer to respond and investigate security incidents related to EHR Application ensuring timely resolution and proper reporting to stakeholders.
• Collaborate with the EHR implementation and optimization teams to ensure that security measures are integrated into the deployment of new features, updates, and third-party applications.
• Stay informed about emerging security threats, technologies, and best practices related to EHR systems.
• Recommend improvements and optimizations to the EHR security environment based on industry trends and emerging threats.
• Monitor user behavior by using tools like P2Sentinel to determine trends and possible incidents.
• Work with EHR Security Officer and EHR Core team to assist on internal and external audits.
• Participate in Cerner/OHPAC upgrades, security patches and system maintenance to ensure ongoing security.
• Participate in the Domain Strategy for EHR Application.
• Stay up to date with security updates, best practices and regulatory changes.

Required Experience

• Three plus years of IT experience desired.
• Strong Understanding of EHR Systems
• Understanding of HIPAA, HITECH, meaningful user and other healthcare security regulations.
• Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication(MFA), and identity management solutions.
• Strong analytical, problem-solving, and troubleshooting skills related to Cerner/OHPAC security and access issues.
• Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users.
• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.
• Knowledge of Discern and ccl.

Skills & Experience Requirements

SkillRequired / DesiredExperienceStrong understanding of Oracle Health EHR and securityRequired5+ YearsUnderstanding of HIPAA, HITECH, Meaningful Use, and other healthcare security regulationsHighly Desired3+ YearsExperience with Active Directory (AD), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity management solutionsHighly Desired3+ YearsKnowledge of Discern and CCLHighly Desired3+ YearsStrong analytical, problem-solving, and troubleshooting skills related to Cerner / OHPAC security and access issuesRequired5+ YearsExcellent communication and collaboration skills to work with IT teams, compliance officers, and end usersRequired5+ YearsFamiliarity with healthcare IT infrastructure, including networking, firewalls, and database securityHighly Desired5+ YearsApplication support experienceRequired5+ YearsAbility to manage multiple competing priorities and multitask effectively in a fast-paced environmentRequired3+ YearsDemonstrated commitment to exceptional customer service for users with varying technical knowledgeRequired3+ Years