EPIC SECURITY ANALYST

Job Title:

Epic Security Analyst

Department:

Epic

Job Summary

The Epic Security Analyst is responsible for the design, build, implementation, and ongoing support of security roles, templates, and user provisioning within the Epic electronic health record (EHR). This role ensures users have appropriate access while maintaining compliance, audit readiness, and adherence to organizational security policies. The analyst serves as a subject matter expert for Epic security concepts and collaborates with operational, compliance, and IT teams to support secure and effective system access.

Essential Duties & Responsibilities

• Configure, build, andmaintainEpic security templates, user roles, position-based access, and security classifications.
• Maintain andoptimizeuser provisioning processes aligned with organizational job roles and security best practices.
• Support security design for new departments, workflows, and integrated applications.
• Collaborate with application teams to ensure access aligns with workflow requirements across Epic modules.
• Participate in system upgrades, release cycles, and implementation of new security functionality.
• Troubleshoot user access issues, permission errors, login problems, and workflow restrictions.
• Investigate root causes and implement sustainable solutions for security-related incidents.
• Utilize Epic security tools to diagnose and resolve access-related issues.
• Collaborate with Compliance and Audit teams on security reviews, access audits, and remediation efforts.
• Partner with HR, Compliance, IT, and departmental leaders to ensureaccurateandtimelyuser provisioning.
• Communicate security changes, access impacts, and provisioning workflows to stakeholders.
• Serve as a consultant for security and access needs during implementations and organizational changes.

• Develop and execute testing strategies for upgrades, security enhancements, and workflow changes.
• Create andmaintaindocumentation for security build, workflows, change logs, and standards.
• Maintain audit-ready documentation for user provisioning and access control procedures.
• Provide support during go-lives, location activations, and system updates.
• Provide guidanceregardingaccess requests, approvals, and provisioning standards.

Minimum Qualifications

Required Qualifications

• Bachelor’s degree in information technology, cybersecurity, healthcare, business, or related field (or equivalent experience).
• 1–3+ years of experience in EHR systems, user access management, IT security, or healthcare application support.
• Strong analytical and problem-solving skills.
• Excellent communication and customer service abilities.
• Understanding ofsecurity, compliance, and audit principles.

Preferred Qualifications

• Epic Security or User Provisioning certification (or willingness to obtain within 6 months).
• Experience inhealthcareIT, identity management, or access control systems.
• Familiarity with HIPAA, regulatory requirements, and clinical/operational workflows.
• Experience supporting Epic modules and cross-application security needs.

Skills and Competencies

• Ability to translate operational and compliance needs into secure technical solutions.
• Strong attention to detail and commitment to accuracy.

• Ability to work independently and in cross-functional teams.
• Highly organized and able to manage multiple priorities in a fast-paced environment.
• Strong problem-solving,critical-thinking, and documentation skills.
• Proficiencywith Microsoft Office (Outlook, Teams, Excel, SharePoint).
• Ability to handle sensitive and confidential information with discretion.

All candidates must be able to perform the essential functions of this position. The American with Disabilities Act (ADA) requires that reasonable accommodations be made for qualified individuals to help perform the essential functions of the position.

South Central Regional Medical Center is an equal opportunity employer and does not discriminate based on race, color, religion, sex, gender, national origin, age, disability, or genetic information.