Security Analyst/Technical Support Analyst 3

Position Overview

We are seeking an EHR Security Analyst to provide technical and functional security support for a Cerner Millennium / Oracle Health EHR environment. This role focuses on EHR security configuration, user access, role-based permissions, authentication, auditing, access troubleshooting, and security support.

The analyst will work closely with EHR application teams, information security, IT support, clinical and operational teams, privacy/compliance stakeholders, and end users to ensure appropriate access to EHR applications based on job responsibilities, organizational policies, and security requirements.

Key Responsibilities

• Maintain and support EHR security configurations, including Millennium Positions, Preferences, and OHPAC security groups .

• Map EHR position definitions and security groups to appropriate user roles and job functions.

• Review and process EHR access requests according to established policies, procedures, and role-based access requirements.

• Create, modify, and terminate user access based on approved requests and established processes.

• Monitor and enforce appropriate use of EHR access-control positions and security policies.

• Support user provisioning and offboarding procedures and assist with opportunities for automation.

• Troubleshoot Cerner/OHPAC security, access, authentication, and user-access issues .

• Monitor EHR access activity and conduct internal security reviews and audits to identify potential risks or vulnerabilities.

• Assist with development and maintenance of EHR security policies, procedures, guidelines, and documentation.

• Support security incident investigation and resolution related to the EHR application.

• Collaborate with EHR implementation and optimization teams to incorporate security controls into new features, upgrades, and third-party applications.

• Participate in Cerner/OHPAC upgrades, security patches, and system maintenance .

• Support internal and external audits and security documentation activities.

• Monitor user behavior and access activity using available security monitoring tools.

• Work with EHR security, information security, and core application teams on security controls, downtime procedures, and application security requirements.

• Stay current with EHR security practices, healthcare security requirements, threats, and regulatory changes.

• Recommend improvements to EHR security and access-management processes based on operational needs and industry practices.

Required Qualifications

• 3+ years of IT experience .

• 3+ years of healthcare IT experience .

• Hands-on experience with Cerner Millennium / Oracle Health EHR security .

• Experience with Millennium Positions, Preferences, and OHPAC security groups/positions .

• Strong understanding of EHR systems and EHR security/access management.

• Experience troubleshooting Cerner/OHPAC security and access issues.

• Knowledge of Discern and CCL .

• Strong analytical, troubleshooting, and problem-solving skills.

• Strong communication and collaboration skills when working with technical teams, compliance teams, application teams, and end users.

Additional / Highly Desired Qualifications

• Knowledge of HIPAA, HITECH , and healthcare security/privacy requirements.

• Experience with Active Directory (AD), Single Sign-On (SSO), Multi-Factor Authentication (MFA) , and identity management solutions.

• Familiarity with healthcare IT infrastructure, including networking, firewalls, and database security.

• Experience supporting EHR security audits, security policies, access reviews, and compliance activities.

• Experience with EHR upgrades, patches, application maintenance, and security-related implementations.