Intermediate Information System Security Analyst

Analyzes, plans, designs, implements, maintains, optimizes, and supports Baptist OneCare (Epic)and other assigned clinical, revenue cycle, and enterprise application security functions.

Performs security workflow assessments, access governance reviews, risk analyses, and security design activities.

Translates operational, regulatory, and business requirements into secure system configurations and role-based access solutions.

Performs security build, testing, auditing, upgrades, enhancements, implementation, and maintenance activities for Epic and related technologies.

Works independently on complex assignments and collaborates across application, infrastructure, identity and access management, privacy, compliance, audit, and operational teams to support secure clinical and business operations.

Exercises independent judgment, provides tier-two support, and serves as a technical resource to associate analysts and project teams.

Incumbent is subject to callback and on-call as required.

Performs other duties as assigned.

• Facilitates assigned Epic security implementation, upgrade, optimization, and maintenance activities to meet project milestones and organizational objectives.
• Designs, builds, validates, and maintains Epic user access, security classes, templates, roles, user records, provider-related security, department security, release security, and related configuration within assigned scope.
• Applies role-based access control, least-privilege, minimum-necessary, unique-user identification, emergency-access, and separation-of-duties principles when evaluating and implementing access.
• Performs access governance reviews and evaluates requests for new or modified access to ensure appropriate authorization, documentation, approval, and alignment with Baptist standards.
• Develops and executes unit, integrated, regression, upgrade, and user-acceptance security testing using established protocols; documents results and manages defects through resolution.
• Provides tier-two support and performs root-cause analysis for recurring access issues, security incidents, audit findings, and compliance exceptions; documents resolutions and escalates higher-risk issues.
• Supports security incident response through investigation, evidence gathering, documentation, remediation coordination, recovery, and post-incident review activities within assigned responsibilities.
• Coordinates with Epic application teams, Identity and Access Management, cybersecurity, infrastructure, privacy, compliance, internal audit, vendors, and operational leaders to support secure integrated workflows.
• Assesses vendor releases and upgrades for security, access, workflow, and integration impacts; completes assigned build and supports readiness, change control, deployment, and validation activities.