Intermediate Information System Security Analyst

Job Summary

Analyzes plans designs implements maintains optimizes and supports Baptist OneCare (Epic)and other assigned clinical revenue cycle and enterprise application security functions. Performs security workflow assessments access governance reviews risk analyses and security design activities. Translates operational regulatory and business requirements into secure system configurations and role-based access solutions. Performs security build testing auditing upgrades enhancements implementation and maintenance activities for Epic and related technologies. Works independently on complex assignments and collaborates across application infrastructure identity and access management privacy compliance audit and operational teams to support secure clinical and business operations. Exercises independent judgment provides tier-two support and serves as a technical resource to associate analysts and project teams. Incumbent is subject to callback and on-call as required. Performs other duties as assigned.

Job Summary

• Facilitates assigned Epic security implementation upgrade optimization and maintenance activities to meet project milestones and organizational objectives.

• Designs builds validates and maintains Epic user access security classes templates roles user records provider-related security department security release security and related configuration within assigned scope.

• Applies role-based access control least-privilege minimum-necessary unique-user identification emergency-access and separation-of-duties principles when evaluating and implementing access.

• Performs access governance reviews and evaluates requests for new or modified access to ensure appropriate authorization documentation approval and alignment with Baptist standards.

• Develops and executes unit integrated regression upgrade and user-acceptance security testing using established protocols; documents results and manages defects through resolution.

• Provides tier-two support and performs root-cause analysis for recurring access issues security incidents audit findings and compliance exceptions; documents resolutions and escalates higher-risk issues.

• Supports security incident response through investigation evidence gathering documentation remediation coordination recovery and post-incident review activities within assigned responsibilities.

• Coordinates with Epic application teams Identity and Access Management cybersecurity infrastructure privacy compliance internal audit vendors and operational leaders to support secure integrated workflows.

• Assesses vendor releases and upgrades for security access workflow and integration impacts; completes assigned build and supports readiness change control deployment and validation activities.