Cybersecurity Epic Analyst

Penn Medicine - Philadelphia, PA

Full-time - Mid Level

Remote - Philadelphia, PA

Ambulatory Health Care Services

About the position

Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical, and business professionals across all disciplines. Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work? The Cybersecurity Epic Analyst position is crucial for administering all aspects of the system security standards and profiles of the Epic system. This role involves setting up and maintaining Data Courier connections between multiple environments within the organization. The analyst will be responsible for monitoring and auditing security guidelines, ensuring compliance, and managing changes effectively. As a power user of the Epic system, the analyst will leverage technical, functional, and analytical skills to maximize the benefits of the Epic system for clinical and business areas. The position requires planning and coordinating unstructured activities around system use while leading cross-functional teams and applications within the Penn Medicine enterprise systems. Additionally, the role includes providing system support for the installation, maintenance, and training of the Epic System, along with a deep understanding of the system architecture and its integration with other systems. The analyst will develop and maintain policies and procedures related to Data Courier and role-based access, ensuring that security measures are upheld. Responsibilities include defining and configuring Data Courier streams, auditing user moves to production, and maintaining secure mechanisms for granting and removing access to Epic. The analyst will also oversee the integrity of master file changes and ensure that only authorized network user IDs are used. The role involves organizing efforts among team members to manage application security effectively and developing comprehensive go-live, conversion, and implementation plans. Daily support of the Epic system will include troubleshooting undefined problems, monitoring vendor activities, and coordinating integration efforts. Auditing responsibilities will encompass reviewing security access logs, verifying audit reports, and identifying inappropriate access occurrences. Overall, this position plays a vital role in ensuring the security and efficiency of the Epic system within Penn Medicine.

Responsibilities

• Administer all aspects of the system security standards and profiles of the Epic system.
• Set up and maintain Data Courier connections between multiple environments.
• Monitor and audit security guidelines and changes.
• Develop and maintain policies and procedures related to Data Courier.
• Provide training and education related to using Data Courier.
• Define and configure Data Courier streams and associated tools.
• Audit Data Courier user moves to production.
• Maintain secure mechanisms for granting and removing access to Epic.
• Review and validate role-based access periodically.
• Develop and maintain master templates for role-based access assignment.
• Provide oversight to the integrity of master file changes, specifically EMP.
• Confirm the use of only authorized network user IDs.
• Develop user access requirements for future implementations.
• Organize efforts in managing application security among team members.
• Develop go-live, conversion, and implementation plans with effective communication and contingencies.
• Provide daily support of the Epic system, including troubleshooting and system operations.
• Monitor vendor activities and ensure timely application of security patches.
• Identify potential issues between applications and recommend solutions.
• Track progress and coordinate integration efforts.
• Review security access logs and audit reports for suspicious activities.

Requirements

• Bachelor's Degree in Computer Science, Business Administration, Engineering, or Process Improvement.
• 3+ years of Healthcare IT experience is required.
• 2+ years of Help Desk or IS customer support experience is preferred.
• 1+ years of experience with server class systems, including Windows Server and Active Directory, is preferred.
• 2+ years of providing daily operational support including break/fix work and system performance evaluation is preferred.
• 1+ years of experience working on a Build team for an Epic System Installation is preferred.
• Epic Security Certification is preferred.
• Epic Data Courier Certification is preferred.
• Any Epic application Certification is preferred.
• Knowledge of Epic provisioning including EMP and SER records.
• Skilled in time, priority, and task management.
• Interpersonal skills to interact with customers and team members.
• Good communication skills to interact with team members and support personnel.
• Good leadership skills to guide and mentor less experienced personnel.
• Ability to anticipate problems and resolve ambiguity.
• Good analytical and creative problem-solving skills.

Nice-to-haves

• Experience with cybersecurity frameworks and standards.
• Familiarity with healthcare regulations and compliance requirements.
• Knowledge of additional Epic modules and functionalities.

Benefits

• Comprehensive compensation and benefits program.
• Prepaid tuition assistance program.
• Health and wellness programs.
• Employee engagement initiatives.