[Hiring] Epic Compliance & Environment Management Analyst @CVS Health

Role Description

The Epic Security Compliance Analyst monitors and reports on adherence to role-based access controls, performs regular internal audits to ensure data integrity and privacy, and engages in and responds to third-party audit requests. Must exhibit a professional attitude, communication style, and presence.

Qualifications

• 3 years of experience in healthcare IT
• Demonstrated experience with EMR software, including audit reporting, and change control processes using tools like Data Courier, Content Management, and Analytics Catalog
• Self-directed learning, multi-tasking, organizational, communication, and IT project management skills
• Some experience specifically supporting Epic environments (preferred)
• Demonstrated experience with Epic software, including audit reporting, and change control processes using tools like Data Courier, Content Management, and Analytics Catalog (preferred)
• Relevant Epic certifications (e.g., Data Courier, Bridges) are often preferred
• ITIL certification is also a common preference
• Certified Information Systems Security Professional (CISSP) preferred
• Degree in Information Technology, Computer Science, or a related field; or comparable industry and vendor-provided certifications

Requirements

• Conduct routine audits to review and assess compliance with departmental policies and procedures on data migration, EPCS, and system access
• Provide requested reports and documentation as required and coordinate with IA SOX to respond to any findings
• Configure compliance reports highlighting findings, recommendations, and areas of concern
• Administer investigations into potential compliance violations or breaches, gathering evidence, conducting interviews, and preparing reports on findings
• Monitor disaster recovery exercises, tracking scheduling compliance and completion
• Act as a liaison between Epic technical teams and Internal Audit
• Host and facilitate meetings to review findings and deficiencies with teams and assist in remediation plans
• Draft, prepare, and disseminate education on identified compliance violations with minimal manager supervision
• Manage smaller projects with multiple teams and participate in multi-disciplined project teams
• Maintain documentation for routine audits, compliance reports, and Audit Board requests
• Track clinical and technical team adherence to policies and procedures
• Analyze internal controls, policies, and procedures to identify weaknesses and recommend improvements
• Collaborate with Epic Security group to confirm all Epic certifications are up to date for Epic analysts with EMR access
• Monitor the planning and testing of downtime and disaster recovery procedures
• Leverage ServiceNow for incident management review and change control compliance
• Demonstrate ability to integrate into multiple work teams
• Understand technological advances and innovations available in the healthcare industry
• Promote individual professional growth and development by meeting requirements for mandatory/continuing education and skills competency

Benefits

• Comprehensive medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources based on eligibility