Epic Security Coordinator

Job Description

The Epic Security Coordinator is responsible for the administration, governance, maintenance, and optimization of security access within the Epic electronic health record (EHR) system. The role oversees user provisioning, role-based security design, access audits, compliance monitoring, and security governance to ensure appropriate access to Epic applications and protected health information (PHI). The Epic Security Coordinator serves as the primary liaison between operational leaders, Human Resources, Information Security, Compliance, Information Technology, and Epic application teams to ensure user access is granted, modified, and removed in accordance with organizational policies, regulatory requirements, and Epic best practices.

The Epic Security Coordinator is responsible for the administration, governance, maintenance, and optimization of security access within the Epic electronic health record (EHR) system. The role oversees user provisioning, role-based security design, access audits, compliance monitoring, and security governance to ensure appropriate access to Epic applications and protected health information (PHI). The Epic Security Coordinator serves as the primary liaison between operational leaders, Human Resources, Information Security, Compliance, Information Technology, and Epic application teams to ensure user access is granted, modified, and removed in accordance with organizational policies, regulatory requirements, and Epic best practices.

• Administers Epic security access using Epic Security Class, User Record, Role, Template, and related security tools. Configures and maintains role-based access models to support clinical, operational, and business workflows. Creates, modifies, validates, suspends, and terminates Epic user access. Ensures security assignments align with job responsibilities and the principle of least privilege. Supports new department, clinic, service line, and organizational security requests.
  
  Maintains security standards and documentation for Epic security configurations.
• Coordinates access requests for new hires, transfers, role changes, contractors, students, and providers. Partners with Human Resources and operational leaders to ensure security assignments remain current. Facilitates timely access terminations and role modifications. Monitors access workflows to ensure adherence to established service-level agreements. Validates user affiliations and organizational relationships before granting access.
• Supports Epic security governance structures and approval processes. Participates in security committees and accesses governance meetings. Develops and maintains security policies, procedures, standards, and work instructions. Ensures compliance with HIPAA, HITECH, CMS, Joint Commission, and organizational requirements. Assists in responding to audit findings and regulatory reviews. Maintains evidence supporting security controls and access decisions.
• Conducts routine user access reviews and security audits. Monitors segregation of duties and identify potential access conflicts. Reviews security reports and investigates inappropriate or excessive access. Partners with Compliance, Information Security, and Internal Audit teams on security investigations. Assists with monitoring privileged and elevated access assignments. Generates reports and dashboards supporting ongoing access compliance.
• Collaborates with Information Technology and Information Security teams to support identity management initiatives. Assists with integration of Epic security processes and enterprise identity management systems. Participates in single sign-on (SSO), multifactor authentication (MFA), and authentication management initiatives. Supports security testing and validation activities for Epic upgrades and implementations. Coordinates security support during mergers, acquisitions, and organizational restructuring efforts.
• Supports Epic implementation, optimization, upgrade, and expansion projects. Participates in workflow analysis and security design sessions. Evaluates existing access models and recommends improvements. Implements security…