VDH EHR Security Analyst/Technical Support Analyst 3

• The Virginia Department of Health (VDH) is seeking an EHR Security Analyst/Technical Support Analyst 3 to support security, access, user provisioning, and Tier 1 technical support for the Electronic Health Record (EHR) environment.
• The role provides technical and functional support for Cerner/OHPAC security configuration, user access, security roles, authentication, auditing, and access-related troubleshooting.
• The analyst will collaborate with EHR application, IT, information security, privacy, compliance, clinical, and operational teams to maintain appropriate user access and security controls.
• This position supports EHR security operations, audits, incident response, system maintenance, upgrades, and compliance activities., * Support EHR security configuration, access management, user provisioning, authentication, auditing, and access-related troubleshooting.
• Maintain and map EHR position definitions, including Millenium Positions, Preferences, and OHPAC Security Groups, to VDH positions.
• Review and process EHR access requests according to established policies, procedures, organizational standards, and role-based access requirements.
• Create, modify, and terminate user access based on approved requests.
• Monitor and enforce appropriate EHR access control positions and policies.
• Help define and automate user provisioning and offboarding procedures.
• Conduct internal EHR security audits to identify and mitigate risks and vulnerabilities.
• Develop and maintain EHR security policies, procedures, guidelines, documentation, and downtime procedures.
• Investigate and respond to EHR security incidents and support timely resolution and reporting.
• Integrate security measures into new EHR features, updates, deployments, and third-party applications.
• Monitor user behavior using tools such as P2Sentinel to identify trends and potential incidents.
• Support internal and external audits.
• Participate in Cerner/OHPAC upgrades, security patches, and system maintenance.
• Support the Domain Strategy for the EHR application.
• Stay current with security updates, emerging threats, industry best practices, and regulatory changes.
• Recommend improvements and optimizations to the EHR security environment.
• Provide Tier 1 technical and functional support to EHR end users in related security and access areas.

Responsibilities:

• Manage EHR user access and role-based permissions.
• Process and maintain user provisioning and offboarding activities.
• Troubleshoot Cerner/OHPAC security and access issues.
• Monitor access-related activities and perform security audits.
• Support healthcare security and compliance requirements.
• Maintain security policies, procedures, and technical documentation.
• Investigate EHR security incidents and coordinate appropriate responses.
• Collaborate with EHR, IT, information security, privacy, compliance, and application support teams.
• Assist with upgrades, patches, maintenance, and security enhancements.
• Support audit activities and security documentation.
• Identify opportunities to improve EHR security, access management, and support processes.

• 3+ years of healthcare IT experience.
• 3+ years of Millenium and OHPAC security position experience.
• Cerner/OHPAC EHR security and access support.
• HIPAA, HITECH, and healthcare security regulations.
• Active Directory, SSO, MFA, and identity management.
• Discern and CCL.
• EHR security troubleshooting, auditing, and user provisioning.

Include candidate email address and current city/state.

Candidate must physically reside within the United States for the duration of the assignment., * 3+ years of healthcare IT experience.

• 3+ years of experience with Millenium and OHPAC security positions.
• 3+ years of analytical, problem-solving, and troubleshooting experience related to Cerner/OHPAC security and access issues.
• 3+ years of communication and collaboration experience working with IT teams, compliance officers, and end users.
• 3+ years of knowledge of Discern and CCL.
• Strong understanding of EHR systems.
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future.
• Must physically reside within the United States for the duration of the assignment., * 3+ years of general IT experience.
• 3+ years of experience with EHR systems, specifically Cerner/OHPAC.
• Knowledge of HIPAA, HITECH, Meaningful Use, and other healthcare security regulations.

• 3+ years of experience with:

• Active Directory (AD).
• Single Sign-On (SSO).
• Multi-Factor Authentication (MFA).
• Identity management solutions.

3+ years of familiarity with healthcare IT infrastructure, including:

• Networking.
• Firewalls.
• Database security.