EHR Security Analyst

About the Role

Location: Richmond, VA

Work Model: Hybrid

Duration: 12+ months with potential to extend or convert to full-time

Interview: Phone + In-person

Responsibilities

• Maintain and map EHR positions, security groups, preferences, and user roles.
• Monitor EHR access and ensure users receive appropriate permissions based on their job functions.
• Support user provisioning and offboarding processes.
• Troubleshoot Cerner/OHPAC security and access issues.
• Conduct internal EHR security audits and help identify and mitigate security risks.
• Support security documentation, procedures, and downtime processes.
• Investigate EHR-related security incidents and coordinate resolution with relevant teams.
• Work with application and optimization teams on security requirements for new features, updates, and third-party applications.
• Monitor user behavior and security trends using available EHR security tools.
• Support internal and external audits.
• Participate in Cerner/Oracle Health upgrades, security patches, and system maintenance.
• Support ongoing EHR security improvements based on emerging threats and security practices.
• Provide application support to EHR users on related security/access issues.

Qualifications

• 5+ years of Oracle Health/Cerner EHR security experience
• 5+ years troubleshooting Cerner/OHPAC security and access issues
• 5+ years of application support experience
• Strong understanding of Oracle Health EHR and security
• Hands-on experience supporting EHR access, security roles, and permissions
• Strong analytical and troubleshooting ability in an EHR environment
• Ability to work directly with IT teams, compliance/security teams, and EHR end users
• Ability to manage multiple competing priorities

Strongly Desired

• 3+ years HIPAA/HITECH and healthcare security experience
• 3+ years Active Directory, SSO, MFA, and identity management
• 3+ years Discern and CCL
• Healthcare IT infrastructure knowledge, including networking, firewalls, and database security
• Experience supporting EHR audits, upgrades, patches, and security maintenance