Epic Security Analyst

Under minimal supervision, the Epic Security Analyst (Intermediate) is responsible for supporting, maintaining, and optimizing Epic security access across the organization. This position works closely with operational leaders, application teams, compliance stakeholders, and end users to ensure secure, appropriate, and efficient access to Epic applications and related systems.

The Epic Security Analyst demonstrates the ability to analyze complex security requests, troubleshoot access-related issues, and implement security solutions that align with organizational policies, regulatory requirements, and Epic best practices. The analyst effectively manages competing priorities in a fast-paced healthcare environment while ensuring data confidentiality, integrity, and availability.

Under minimal supervision, serves as a lead resource for assigned Epic security initiatives, including security role design, access governance, security audits, and organizational projects. Develops, documents, and maintains procedures and standards related to Epic security administration. Interacts professionally with leadership, faculty, staff, vendors, and cross-functional Information Technology teams.

• Proven ability to successfully execute multiple assignments simultaneously in a matrixed environment.
• Demonstrated critical and analytical thinking proficiencies.
• Strong written and verbal communication skills.
• Demonstrated troubleshooting competencies.
• Excellent organizational management skills.
• Project Management skills.

Education:

• Bachelor’s degree (4 years of comparable experience may be substituted for a degree).

Experience:

• A minimum of three (3) years of relevant experience with clinical or business systems with exposure to software development/build lifecycles.

Licenses/Certifications:

• As specified by the department director, Epic certification for assigned modules are required within eighteen (18) months of hire. Epic certification must be maintained per Epic Corporation standards.

Security Administration

• Provision, modify, and deprovision Epic user access in accordance with organizational policies, security standards, and regulatory requirements.
• Configure and maintain Epic user templates, security classes, security points, user records, provider records, and role-based access structures.
• Ensure appropriate segregation of duties and least-privilege access principles are consistently applied.

Access Governance

• Review, analyze, and approve security requests to ensure compliance with organizational policies and operational requirements.
• Participate in periodic access reviews, audits, and attestation activities to validate appropriate user access.
• Assist in developing and enforcing Epic security governance processes and standards.

Design & Build

• Design, build, test, and implement Epic security solutions to support new departments, workflows, acquisitions, and organizational initiatives.
• Evaluate security requirements and recommend access models that balance operational efficiency, compliance, and system security.
• Collaborate with Epic application teams to support integrated security solutions across Epic modules.

Troubleshooting & Support

• Investigate and resolve Epic security-related incidents, access concerns, authentication issues, and user account problems.
• Perform root cause analysis on security and access-related issues and implement corrective actions.

Compliance & Audit

• Support internal and external audits by providing security documentation, reports, and evidence of compliance.
• Monitor Epic security practices for adherence to HIPAA, organizational security policies, and Epic best practices.
• Identify, document, and remediate security risks and inappropriate access.

Reporting & Analysis

• Develop and maintain security reports, dashboards, and metrics related to user access and security compliance.
• Analyze access patterns and recommend improvements to enhance security and operational efficiency.
• Utilize Epic reporting tools and available technologies to support auditing and monitoring activities.

Project Leadership

• Serve as security lead for assigned Epic implementations, upgrades, optimizations, and enhancement projects.
• Participate in system testing, upgrade validation, and integrated workflow reviews to ensure security requirements are met.

Documentation & Knowledge Management

• Develop and maintain security procedures, standards, workflows, and training materials.
• Document security configurations, design decisions, and operational support processes.
• Provide mentoring and guidance to junior analysts and security team members as appropriate.