Epic Security Analyst - Intermediate

UT Health San Antonio•San Antonio, TX

About The Position

Under minimal supervision, the Epic Security Analyst (Intermediate) supports, maintains, and optimizes Epic security access across the organization. The analyst works closely with operational leaders, application teams, compliance stakeholders, and end users to ensure secure, appropriate, and efficient access to Epic applications and related systems. The role analyzes complex security requests, troubleshoots access-related issues, and implements solutions aligned with organizational policies, regulatory requirements, and Epic best practices. It manages competing priorities in a fast-paced healthcare environment while protecting data confidentiality, integrity, and availability. The analyst serves as a lead resource for assigned Epic security initiatives, including security role design, access governance, security audits, and organizational projects. The role develops, documents, and maintains procedures and standards for Epic security administration and interacts professionally with leadership, faculty, staff, vendors, and cross-functional Information Technology teams.

Requirements

Bachelor’s degree, or four years of comparable experience substituted for a degree.
At least three years of relevant experience with clinical or business systems, including exposure to software development/build lifecycles.
Ability to successfully execute multiple assignments simultaneously in a matrixed environment.
Critical and analytical thinking proficiencies.
Strong written and verbal communication skills.
Troubleshooting competencies.
Excellent organizational management skills.
Project management skills.
Epic certification for assigned modules, as specified by the department director, required within eighteen months of hire; certification must be maintained according to Epic Corporation standards.

Responsibilities

Provision, modify, and deprovision Epic user access in accordance with organizational policies, security standards, and regulatory requirements.
Configure and maintain Epic user templates, security classes, security points, user records, provider records, and role-based access structures.
Apply segregation-of-duties and least-privilege access principles.
Review, analyze, and approve security requests for compliance with organizational policies and operational requirements.
Participate in periodic access reviews, audits, and attestation activities.
Assist in developing and enforcing Epic security governance processes and standards.
Design, build, test, and implement Epic security solutions for new departments, workflows, acquisitions, and organizational initiatives.
Evaluate security requirements and recommend access models that balance operational efficiency, compliance, and system security.
Collaborate with Epic application teams on integrated security solutions across Epic modules.
Investigate and resolve Epic security incidents, access concerns, authentication issues, and user account problems.
Perform root cause analysis and implement corrective actions for security and access-related issues.
Support internal and external audits by providing security documentation, reports, and evidence of compliance.
Monitor Epic security practices for adherence to HIPAA, organizational security policies, and Epic best practices; identify, document, and remediate security risks and inappropriate access.
Develop and maintain security reports, dashboards, and metrics related to user access and security compliance.
Analyze access patterns and recommend improvements to security and operational efficiency.
Use Epic reporting tools and available technologies to support auditing and monitoring.
Serve as security lead for assigned Epic implementations, upgrades, optimizations, and enhancement projects.
Participate in system testing, upgrade validation, and integrated workflow reviews to ensure security requirements are met.
Develop and maintain security procedures, standards, workflows, and training materials.
Document security configurations, design decisions, and operational support processes.
Provide mentoring and guidance to junior analysts and security team members as appropriate.