Pos1215 - Mgr Identity & Access Mgmt

Envision Healthcare•Nashville, TN

About The Position

The Manager, Identity and Access Management (IAM) leads the strategic development and operational oversight of IAM services within a healthcare environment. This role ensures secure, compliant, and efficient access to clinical systems and enterprise applications. The Manager is responsible for aligning IAM initiatives with HIPAA, HITECH, and other healthcare regulations, while leveraging technologies to safeguard privileged access. In this leadership role, you will have the opportunity to develop your coaching and mentoring skills, fostering the professional growth of your team. You will play a key role in shaping the future of our IAM services and have a significant impact on the security and compliance of our organization. Company Overview: Envision Healthcare is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country. Benefits: At Envision Healthcare, we offer benefits at the speed of your life. Our wide range of health and welfare benefits allow you to choose the right ones for you and your family. Best of all, qualifying employees are eligible to enroll from day one, so you can rest easy knowing you and your loved ones are protected. Envision Healthcare offers a variety of health and welfare benefit options to help protect your health and promote your wellbeing. The benefits offered include but not limited to: Medical, Dental, Vision, Life, Disability, Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for Transportation and Parking & HSAs. Paid Time Off: Envision Healthcare offers paid time off, 9 observed holidays and paid family leave. You accrue Paid Time Off (PTO) each pay period and depending on your position and can earn a minimum of 20 days and up to 25 days per calendar year.

Requirements

Proven leadership in IAM within a healthcare or highly regulated environment.
Strong knowledge of IAM frameworks, identity governance, and privileged access management.
Hands-on experience with Active Directory, Entra ID, Okta, CyberArk and Microsoft 365.
Familiarity with clinical systems and healthcare IT workflows.
Deep understanding of HIPAA, HITECH, and NIST security frameworks.
Excellent communication, stakeholder engagement, and cross-functional collaboration skills.
Bachelor’s degree in Information Security, Health Informatics, or related field required.
5 Plus years of IAM or IT security experience, with prior experience in a leadership role in healthcare required.

Nice To Haves

Active Directory, Entra ID, Okta, CyberArk and Microsoft 365
ITIL certification is highly desirable.
CISSP or other relevant IAM certifications are highly desirable.

Responsibilities

Manages employees by supporting, coaching, training, assisting with time management and performing evaluations; should conduct regular meetings with all direct reports.
Implements IAM processes and procedures that support healthcare compliance and operational needs, ensuring alignment with established standards.
Oversees the day-to-day identity lifecycle activities for clinicians, staff, contractors, and vendors, providing guidance and resolving routine issues.
Oversees administration of privileged access management (PAM) tools, ensuring adherence to security policies and escalation of complex issues when needed.
Provides direction for configuration and policy enforcement within IDP solutions (e.g., Entra, Okta, Ping), ensuring integration tasks are completed accurately.
Ensures team compliance with HIPAA, HITECH, and organizational security requirements through regular monitoring and corrective actions.
Partners with clinical, HR, compliance, and IT teams to address access provisioning and deprovisioning challenges, escalating non-standard problems.
Reviews and audits system access for anomalies, applying standard remediation steps and escalating complex findings.
Responds to security incidents and access-related investigations
Drives automation and self-service initiatives within defined parameters to improve efficiency and user experience.
Stays current on healthcare IT trends, cybersecurity threats, and IAM best practices.