Job Summary
Job Summary
The Onshore Epic Security Coordinator / Security Lead serves as the principal architect, administrator, and operational lead for user access, role-based security, and provider structure across the health system's Epic EHR platform. Positioned onshore, this individual leads security class design, user provisioning governance, SER (Provider) record management, and identity integration. They collaborate directly with Chief Information Security Officers (CISOs), Compliance Officers, Clinical/Operational Leadership, and offshore configuration resources to enforce least-privilege access, maintain HIPAA regulatory compliance, and safeguard protected health information (PHI).
Key Responsibilities
Access Governance & Client Leadership
Act as the primary onshore subject matter expert (SME) and liaison for Information Security, Compliance, Human Resources, and Clinical/Financial application leaders.
Drive Epic security governance, defining role-based access control (RBAC) frameworks, segregation of duties (SoD), and emergency access ("Break-the-Glass") policies.
Lead access audits, compliance reviews (HIPAA, HITECH, Joint Commission), and regulatory risk mitigation efforts across all active Epic modules.
Security Architecture, Build & SER Management
Design, build, test, and maintain Epic Security Classes (ECL), User Templates (EMP), User Roles (EJR), Sub-roles, Profiles, and Menus.
Manage Provider (SER) master file architecture, including provider types, credentialing mappings, clinical service affiliations, and scheduling/billing links.
Configure, automate, and optimize user provisioning workflows, role transitions, and termination processes.
Partner with enterprise IT Security to configure and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Identity & Access Management (IAM) tools (e.g., Imprivata, SailPoint, Okta, Azure AD). Job Summary
The Onshore Epic Security Coordinator / Security Lead serves as the principal architect, administrator, and operational lead for user access, role-based security, and provider structure across the health system's Epic EHR platform. Positioned onshore, this individual leads security class design, user provisioning governance, SER (Provider) record management, and identity integration. They collaborate directly with Chief Information Security Officers (CISOs), Compliance Officers, Clinical/Operational Leadership, and offshore configuration resources to enforce least-privilege access, maintain HIPAA regulatory compliance, and safeguard protected health information (PHI).
Key Responsibilities
Access Governance & Client Leadership
Act as the primary onshore subject matter expert (SME) and liaison for Information Security, Compliance, Human Resources, and Clinical/Financial application leaders.
Drive Epic security governance, defining role-based access control (RBAC) frameworks, segregation of duties (SoD), and emergency access ("Break-the-Glass") policies.
Lead access audits, compliance reviews (HIPAA, HITECH, Joint Commission), and regulatory risk mitigation efforts across all active Epic modules.
Security Architecture, Build & SER Management
Design, build, test, and maintain Epic Security Classes (ECL), User Templates (EMP), User Roles (EJR), Sub-roles, Profiles, and Menus.
Manage Provider (SER) master file architecture, including provider types, credentialing mappings, clinical service affiliations, and scheduling/billing links.
Configure, automate, and optimize user provisioning workflows, role transitions, and termination processes.
Partner with enterprise IT Security to configure and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Identity & Access Management (IAM) tools (e.g., Imprivata, SailPoint, Okta, Azure AD).