[Hiring] Identity & Access Management Analyst @Guthrie

Role Description

The Identity and Access Management (IAM) Analyst is responsible for day‐to‐day user access operations within the Cybersecurity operations team, including ensuring timely user access provisioning/deprovisioning; user access policy, standards, and process improvements via task automation and efficient workflows ensuring least privilege access to Guthrie systems and information.

• Analyze requirements, document standards, and administer IAM functions:
• Identity Governance and Administration
• Privilege Access Management (PAM)
• Single Sign‐On
• Imprivata “tap and go”
• Federation
• Multi‐Factor Authentication
• User access policy and standards
• User access request management
• Provisioning (Azure AD, Active Directory, LDAP and EPIC EMR security)

Qualifications

• High school diploma required; Bachelor's preferred.
• Epic Security certification or within a year of hire.
• Professional security certification or within 12 months of hire/in role.
• 3 to 5 years of experience as an information security analyst or IT business analyst.
• 2+ years' experience with technical experience of PAM, IAM tooling and processes.
• Strong analytical, organizational, and planning skills.
• Experience with scripting languages (PowerShell, Perl, Python, Ruby, etc.).
• Strong verbal and written skills to develop technical documentation, training, and presentations.
• Demonstrated commitment to continuous learning via training, self‐study, and formal education to maintain technical proficiency within the cybersecurity domain.
• Demonstrated experience with IT controls design and implementation.

Requirements

• Understand the scope of the health services Guthrie provides its patients and the threat landscape that may disrupt these services.
• Define user access policy, standards, roles, and procedures for security, efficiency, and scalability.
• Effectively communicate user access policy and standards to stakeholders.
• Participate in project work to ensure user access controls are addressed in technology designs, workflows, and operating procedures.
• Participate and/or lead AD, PAM, IAM, and MFA tool installation, integration, support, and operations.
• Participate in the development, validation, and execution of comprehensive IAM use cases and test plans.
• Identify, analyze, and resolve data and complex user access workflow issues.
• Demonstrate ability to diagnose and resolve AD, PAM, MFA, and IAM issues and recommend areas for process improvement or innovation to management.
• Provisioning and deprovisioning of regular, privileged, and Epic EMR user access.
• Maintain effective relationships with key technology vendors, industry professionals, security forums, and professional associations.
• Stay informed of cyber/information security laws, regulations, and standards that may affect the information security and risk management program.
• Participate in conducting an annual user entitlement review processes across the organization.
• Document IAM control gap findings, impacts, and recommendations to management.
• Develop and maintain IAM playbooks documenting user access controls, standards, and procedures.
• Establish actionable metrics to support the IAM/cyber program and influence behaviors.
• Ensure IAM controls are operating effectively supporting HIPAA Security and Privacy Rule compliance.
• Support the effort to acquire and sustain HITRUST CSF certification.
• Support responding to Information Security audits and risk assessments requested by regulatory agencies, payers, and other relevant entities.

Benefits

• Joining the Guthrie team allows you to become a part of a tradition of excellence in health care.
• In all areas and at all levels of Guthrie, you’ll find staff members who have committed themselves to serving the community.

Company Description

The Guthrie Clinic is a non-profit, integrated, practicing physician-led organization in the Twin Tiers of New York and Pennsylvania. Our multi-specialty group practice of more than 500 physicians and 302 advanced practice providers offers 47 specialties through a regional office network providing primary and specialty care in 22 communities.

• Guthrie Medical Education Programs include:
• General Surgery
• Internal Medicine
• Emergency Medicine
• Family Medicine
• Anesthesiology
• Orthopedic Surgery Residency
• Cardiovascular, Gastroenterology, and Pulmonary Critical Care Fellowship programs
• Guthrie is also a clinical campus for the Geisinger Commonwealth School of Medicine.