EHR Security Analyst/Technical Support Analyst 3

Cynet Systems•Richmond, VA

About The Position

This role is responsible for managing and maintaining EHR security, including user access, policy enforcement, and incident response. The analyst will work closely with various IT and compliance teams to ensure the security and integrity of the EHR system, adhering to healthcare regulations and best practices.

Requirements

3+ years of IT experience.
3+ years of healthcare IT experience.
Strong understanding and knowledge of Millenium and OHPAC security positions.
Strong understanding of EHR Systems, specifically OH/Cerner.
Understanding of HIPAA, HITECH, meaningful use, and other healthcare security regulations.
Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions.
Strong analytical, problem-solving, and troubleshooting skills related to Cerner/OHPAC security and access issues.
Strong verbal and written communication skills to work with IT teams, compliance officers, and end users.
Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.
Knowledge of Discern and CCL.

Nice To Haves

P2Sentinel

Responsibilities

Map and maintain EHR positions definitions, including Millenium Positions, Preferences, and OHPAC Security groups with organizational positions.
Review and process EHR access requests in accordance with established policies, procedures, organizational standards, and role-based access requirements.
Create, modify, and terminate user access based on approved requests and established processes.
Monitor and enforce appropriate use of EHR Access Control Positions and Policies, ensuring users have the correct level of access based on roles and job functions.
Work with the EHR Security Officer, IT Technical team, Support Team, and EHR Core team to help define and automate user provisioning and offboarding procedures.
Monitor and conduct internal security audits of the EHR application to identify and mitigate risks or vulnerabilities detected.
Work with the EHR Security Officer to develop and maintain security policies, procedures, and guidelines related to the application.
Work with the EHR Security Officer, ISO Office, and EHR Core team to define and complete security documentation and downtime procedures according to security guidelines.
Work with the EHR Security Officer to respond to and investigate security incidents related to the EHR application, ensuring timely resolution and proper reporting.
Collaborate with implementation and optimization teams to ensure security measures are integrated into the deployment of new features, updates, and third-party applications.
Stay informed about emerging security threats, technologies, and best practices related to EHR systems.
Recommend improvements and optimizations to the EHR security environment based on industry trends and emerging threats.
Monitor user behavior by using tools like P2Sentinel to determine trends and possible incidents.
Work with the EHR Security Officer and EHR Core team to assist on internal and external audits.
Participate in Cerner/OHPAC upgrades, security patches, and system maintenance to ensure ongoing security.
Participate in the Domain Strategy for the EHR Application.
Stay up to date with security updates, best practices, and regulatory changes.