A - 6 / 13 - 765748 - Sr IT Security Specialists w / Healthcare Exp - Remote & Raleigh, NC
• The candidate will primarily work remotely. Candidate
may be asked to attend on-site meetings in Raleigh, NC, if needed. All
work (including remote work) must be conducted in the United States.
Candidate must work EST business hours.
Our
direct client has an opening for a Sr IT Security Specialists w / Healthcare Exp
position #
765748. This position is for 12+ months, with option of
extension, and will be worked remote. Candidate may be asked to attend
on-site meetings in Raleigh, NC, if needed. Candidate must work EST
business hours.
If
you are interested, please submit the following :
YOUR
CURRENT RESUME
YOUR
HOURLY RATE
Below
is the job description – Resumes due ASAP –
Description :
The EHR Security Coordinator
is responsible for overseeing and ensuring the security of the organization's
Electronic Health Record (EHR) system. This role involves managing access
controls, conducting security audits, developing security policies, and ensuring
compliance with healthcare regulations such as HIPAA and HITECH. The EHR
Security Coordinator will work closely with IT, clinical, and compliance teams
to secure patient data and protect the integrity of the EHR system.
Key Responsibilities :
Security Management &
Compliance :
• Ensure the EHR system is
secure and compliant with federal, state, and organizational security policies,
including HIPAA, HITECH, and other applicable regulations.
• Monitor and enforce the
appropriate use of EHR access controls, ensuring that users have the correct
level of access based on their roles.
• Conduct regular security
audits of the EHR system, identifying and mitigating risks or vulnerabilities.
• Develop and maintain
security policies, procedures, and guidelines specific to the EHR environment.
• Coordinate with the
stakeholders to implement and maintain security tools, such as firewalls,
intrusion detection / prevention systems, and encryption mechanisms, as
applicable to the EHR system.
Access Controls & User
Management :
• Oversee user provisioning
and de-provisioning, ensuring appropriate access to the system for all
employees and contractors.
• Manage and audit role-based
access controls (RBAC) for the system, ensuring that users have the correct
level of access for their duties
• Ensure that system logs and
user access records are maintained for auditing purposes, and work with
internal audit teams to ensure compliance.
Incident Response & Risk
Management :
• Respond to and investigate
security incidents related to the EHR system, ensuring timely resolution and
proper reporting to relevant stakeholders.
• Perform risk assessments on
new modules or integrations within the EHR, identifying potential security
vulnerabilities and developing mitigation strategies.
• Coordinate with clinical,
IT, and legal teams on breach notification processes in compliance with
regulatory requirements.
Collaboration &
Coordination :
• Collaborate with the EHR
implementation and optimization teams to ensure that security measures are
integrated into the deployment of new features, updates, and third-party
applications.
• Work closely with other
members of the IT security team to ensure alignment between EHR security and
overall organizational cybersecurity strategies.
• Participate in governance
and compliance meetings, offering insights and reports on EHR security.
Continuous Improvement :
• Stay informed about
emerging security threats, technologies, and best practices related to EHR
systems.
• Recommend improvements and
optimizations to the EHR security environment based on industry trends and
emerging threats.
Qualifications : Education :
• Bachelor’s degree in
information technology, Computer Science, Cybersecurity, or a related field.
Relevant work experience may substitute for formal education.
• Security Certifications
(e.g., CISSP, CISM, HCISPP) are highly desirable.
Experience :
• 3-5 years of experience in
IT security, preferably within the healthcare industry.
• Prior experience with EHR
systems is preferred.
• Experience with HIPAA
compliance, healthcare IT security audits, and risk management.
• Knowledge of role-based
access control (RBAC), identity management, and data encryption as it relates
to healthcare information systems.
Skills :
• Strong understanding of EHR
systems.
• Proficient in healthcare
regulations and standards, including HIPAA, HITECH, and meaningful use.
• Excellent problem-solving
and analytical skills.
• Strong communication
skills, capable of working across departments and with clinical teams.
• Ability to manage security
incidents and respond to them efficiently.
• Familiarity with healthcare
IT infrastructure, including networking, firewalls, and database security.
Working Conditions :
• May require occasional
travel to different healthcare facilities within the organization.
• On-call availability for
security incidents.
Required / Desired Skills :
Ability to manage security
incidents and respond to them efficiently. - Required - 7 Years
Risk Management - must be
able to Identify gaps through risk management, and assist in the development of
mitigation strategies. - Required - 7 Years
5-7 years of experience in IT
security, preferably within the healthcare industry. - Required - 7 Years
Experience updating privacy
and security policies based on gaps found through an assessment process. -
Required - 7 Years
Experience Performing risk
assessments based on NIST 800-53 Rev 4. HIPAA, SSA and IRS Pub 1075. -
Required - 7 Years
Knowledge of role-based
access control (RBAC), identity management, and data encryption as it relates
to healthcare information systems. - Required - 7 Years
Proficient in healthcare
regulations and standards, including HIPAA, HITECH, and meaningful use. -
Required - 7 Years
Excellent problem-solving and
analytical skills. - Required - 7 Years
Experience documenting
vulnerability assessment results in a accurate, clear, actionable, and
available way to appropriate personnel - Required - 7 Years
Familiarity with healthcare
IT infrastructure, including networking, firewalls, and database security. -
Required - 7 Years
Strong communication skills,
capable of working across departments and with clinical teams. - Required - 7
Years
By replying to this job advertisement, I agree I want to receive additional job advertisements from FHR, including email, phone and mail to the contact information I am submitting. I consent to FHR, its affiliates, third parties and partners processing my personal data for these purposes and as described in the Privacy Policy. I understand that I can withdraw my consent at anytime.
Apply Now
Apply Now
may be asked to attend on-site meetings in Raleigh, NC, if needed. All
work (including remote work) must be conducted in the United States.
Candidate must work EST business hours.
Our
direct client has an opening for a Sr IT Security Specialists w / Healthcare Exp
position #
765748. This position is for 12+ months, with option of
extension, and will be worked remote. Candidate may be asked to attend
on-site meetings in Raleigh, NC, if needed. Candidate must work EST
business hours.
If
you are interested, please submit the following :
YOUR
CURRENT RESUME
YOUR
HOURLY RATE
Below
is the job description – Resumes due ASAP –
Description :
The EHR Security Coordinator
is responsible for overseeing and ensuring the security of the organization's
Electronic Health Record (EHR) system. This role involves managing access
controls, conducting security audits, developing security policies, and ensuring
compliance with healthcare regulations such as HIPAA and HITECH. The EHR
Security Coordinator will work closely with IT, clinical, and compliance teams
to secure patient data and protect the integrity of the EHR system.
Key Responsibilities :
Security Management &
Compliance :
• Ensure the EHR system is
secure and compliant with federal, state, and organizational security policies,
including HIPAA, HITECH, and other applicable regulations.
• Monitor and enforce the
appropriate use of EHR access controls, ensuring that users have the correct
level of access based on their roles.
• Conduct regular security
audits of the EHR system, identifying and mitigating risks or vulnerabilities.
• Develop and maintain
security policies, procedures, and guidelines specific to the EHR environment.
• Coordinate with the
stakeholders to implement and maintain security tools, such as firewalls,
intrusion detection / prevention systems, and encryption mechanisms, as
applicable to the EHR system.
Access Controls & User
Management :
• Oversee user provisioning
and de-provisioning, ensuring appropriate access to the system for all
employees and contractors.
• Manage and audit role-based
access controls (RBAC) for the system, ensuring that users have the correct
level of access for their duties
• Ensure that system logs and
user access records are maintained for auditing purposes, and work with
internal audit teams to ensure compliance.
Incident Response & Risk
Management :
• Respond to and investigate
security incidents related to the EHR system, ensuring timely resolution and
proper reporting to relevant stakeholders.
• Perform risk assessments on
new modules or integrations within the EHR, identifying potential security
vulnerabilities and developing mitigation strategies.
• Coordinate with clinical,
IT, and legal teams on breach notification processes in compliance with
regulatory requirements.
Collaboration &
Coordination :
• Collaborate with the EHR
implementation and optimization teams to ensure that security measures are
integrated into the deployment of new features, updates, and third-party
applications.
• Work closely with other
members of the IT security team to ensure alignment between EHR security and
overall organizational cybersecurity strategies.
• Participate in governance
and compliance meetings, offering insights and reports on EHR security.
Continuous Improvement :
• Stay informed about
emerging security threats, technologies, and best practices related to EHR
systems.
• Recommend improvements and
optimizations to the EHR security environment based on industry trends and
emerging threats.
Qualifications : Education :
• Bachelor’s degree in
information technology, Computer Science, Cybersecurity, or a related field.
Relevant work experience may substitute for formal education.
• Security Certifications
(e.g., CISSP, CISM, HCISPP) are highly desirable.
Experience :
• 3-5 years of experience in
IT security, preferably within the healthcare industry.
• Prior experience with EHR
systems is preferred.
• Experience with HIPAA
compliance, healthcare IT security audits, and risk management.
• Knowledge of role-based
access control (RBAC), identity management, and data encryption as it relates
to healthcare information systems.
Skills :
• Strong understanding of EHR
systems.
• Proficient in healthcare
regulations and standards, including HIPAA, HITECH, and meaningful use.
• Excellent problem-solving
and analytical skills.
• Strong communication
skills, capable of working across departments and with clinical teams.
• Ability to manage security
incidents and respond to them efficiently.
• Familiarity with healthcare
IT infrastructure, including networking, firewalls, and database security.
Working Conditions :
• May require occasional
travel to different healthcare facilities within the organization.
• On-call availability for
security incidents.
Required / Desired Skills :
Ability to manage security
incidents and respond to them efficiently. - Required - 7 Years
Risk Management - must be
able to Identify gaps through risk management, and assist in the development of
mitigation strategies. - Required - 7 Years
5-7 years of experience in IT
security, preferably within the healthcare industry. - Required - 7 Years
Experience updating privacy
and security policies based on gaps found through an assessment process. -
Required - 7 Years
Experience Performing risk
assessments based on NIST 800-53 Rev 4. HIPAA, SSA and IRS Pub 1075. -
Required - 7 Years
Knowledge of role-based
access control (RBAC), identity management, and data encryption as it relates
to healthcare information systems. - Required - 7 Years
Proficient in healthcare
regulations and standards, including HIPAA, HITECH, and meaningful use. -
Required - 7 Years
Excellent problem-solving and
analytical skills. - Required - 7 Years
Experience documenting
vulnerability assessment results in a accurate, clear, actionable, and
available way to appropriate personnel - Required - 7 Years
Familiarity with healthcare
IT infrastructure, including networking, firewalls, and database security. -
Required - 7 Years
Strong communication skills,
capable of working across departments and with clinical teams. - Required - 7
Years
By replying to this job advertisement, I agree I want to receive additional job advertisements from FHR, including email, phone and mail to the contact information I am submitting. I consent to FHR, its affiliates, third parties and partners processing my personal data for these purposes and as described in the Privacy Policy. I understand that I can withdraw my consent at anytime.
Apply Now
Apply Now