Access & Identity Security Analyst I

The Identity and Access Management (IAM) Security Analyst I is an information technology (IT) professional who will identify, authenticate, and manage access for individuals who will be utilizing MAHEC resources. This will include hardware, application access, employees, affiliate, and 3rd Party Vendors authorizations.  The person in this role will often need to think creatively to maintain current policy requirements while providing solutions for stakeholders.  The person in this role will ensure that employees and/or affiliates access is effectively managed for onboarding and offboarding. 

The person in the IAM role will ensure security makes it possible for the right entities (people or things) to use the right resources (applications or data).

SPECIFIC RESPONSIBILITIES:

• Manage the receipt and review of requests for new employees and 3rd party / vendor for identity and system access.
• Manage the receipt and review of existing employee and 3rd party / vendor requests for access to specific systems and tools.
• Ensure the removal (deprovisioning) of access to specific systems and tools upon suspension or termination of employees, 3rd parties or vendors per company policy.
• Perform periodic compliance audits.
• Be responsible for maintaining user access to PHI systems through audits and automated reporting.
• Engage with the Security Analyst to identify areas of system improvement and operational efficiency.
• Complete daily reporting and security tasks, updates, and processes to ensure that user’s access, and controls hold after nightly updates
• Assist Users with complex login issues to network (active directory) and applications.
• Ensure accurate record keeping for all requests.
• Develop new documentation as needed for process changes.
• Attend and participate in new hire orientation as directed.

• User Account Administration

Create appropriate accounts for new users according to departmental procedures and guidelines established in Network Account Eligibility Policy.  Use Active Directory and other client customized applications for user account provision and de-provisioning.  Maintains a permanent list of all HIPAA-related user accounts ensuring these logins are never reused.  Audits user accounts every 90 days per policy.

Assists users with password resets and verifies identities by using secure methods.

• Onboarding / Offboarding Users

Prepare accounts, login instructions, hardware, and desk setups for new hires and affiliates.  Performs IT orientation for New Hires.  Removes access and hardware after employees and affiliates last day of work.

• Other

Attends meetings, training classes, and serves on committees as assigned.  Maintains all work areas in an organized manner to facilitate the smooth function of the entire department.  Maintains a high standard of ethics, abiding by departmental procedures, and respecting confidential information encountered in the course of the position. 

This position is categorized as a designated driver position and requires use of a MAHEC-owned or other vehicle to conduct MAHEC business on a regularly scheduled basis (e.g., daily, weekly, or for work essential for the employee's job).

This role description is a general description of the essential job functions.  It is not intended to describe all the duties the Identity and Access Security Analyst I may perform.

KEY COMPETENCIES:

• Communication Skills

Effectively and respectably communicate with other individuals, whether it be a colleague, patient, or patient’s family member and appropriately enumerate information in a manner easily understood by all parties. We do this to foster a culture of understanding between all parties, especially in complex and difficult situations, to ultimately provide the best care possible to our patients and their families.

• Decision Making

Ability to make the most appropriate decision in a given situation and then taking the next steps to ensure appropriate and timely completion. This requires conflict resolution skills, critical thinking skills, confidence in your ability to make the right decision in most situations. This also includes ability to prioritize your workday appropriately to ensure the most important tasks are completed on time.

• HealthCare Knowledge

Having the drive to keep yourself abreast and up to date on the new breakthroughs in your area of expertise and communicating them to the rest of the team, as appropriate.  This also includes keeping up with your licensure and yearly training requirements within your area expertise along with MAHEC’s organizational training. Finally, the ability to apply the depth of knowledge maintained and gained through this process in real life scenarios as appropriate.

• Interpersonal Skills

Showing the ability to meet difficult situations with grace, professionalism, and understanding. Within your area of expertise, showing respect and showing empathy where appropriate with your colleagues, patients, and their family at all times, even when its most difficult to do so. This is done, in part, by effective listening, being your authentic self, showing responsibility and dependability, and being patient with others.

• Organizational Values

Adherence to MAHEC’s founding principles and incorporating them every day. This includes, among others, having integrity and accountability, reverence for other cultures and equitable practices, ability to manage change, and displaying a clear understanding of organizational dynamics. Doing these things creates a culture where people want to do the best for each other and gives personal ownership towards the goal of helping people in their time of need.

• Problem Solving

Having an analytical mind and ability to work autonomously to solve complex problems that may arise. The wherewithal to think logically through a difficult problem and come to an appropriate resolution for a given issue. This helps to drive continuous improvement by thinking through where we can improve in a novel way. Measures success by understanding where we are currently and where we want to go and then applying those new ideas to affect positive change.

SPECIFIED SKILLS

• COMPUTER
  • Excellent skills in Microsoft Office including Word, Excel, PowerPoint, and database applications required.
  • Proficient in Microsoft Active Directory, Exchange, and Office 365 Administration
  • Powershell Scripting – specifically to pull data from Active Directory preferred.

• Ability to produce exemplary technical and non-technical documentation for customers.
• Project management skills such as coordinating tasks within & across departments, assigning resources, planning timelines, and maintaining solid documentation of decisions and process. 
• Presentation and public speaking skills are a plus

PHYSICAL DEMANDS

• Frequently moves computer equipment weighing up to 20 pounds across campus and to satellite locations.
• Constantly operates a computer.

SUPERVISORY RESPONSIBILITIES:

• Not Applicable.

EDUCATION AND EXPERIENCE: 

Any combination of education and/or experience equivalent to a four-year degree in cybersecurity, computer science or information systems management and a minimum of two years experience; OR Associate degree in computer related field and a minimum of 4 years’ experience.

• MINIMUM QUALIFICATIONS: 
  • Microsoft Active Directory, Exchange, and Office 365 Administration

• PREFERRED QUALIFICATIONS:
  • Powershell scripting, project management skills, and software management as it relates to security roles and access

REQUIRED LICENSES:

Valid North Carolina State driver's license required.

SCHEDULE:

Regular attendance on-site is an essential function of this position. Typical business hours are Monday – Friday, 8:00 am to 5:00 pm (or flexed to best meet the needs of the clients and/or the Division); 40 hours per workweek; weekend, holiday, or evening coverage is occasionally required. Work hours will need to be flexible in order to respond to special work assignments, or evening activities, as requested by the team leader.

POSITION COMPENSATION:

$25.82

At MAHEC, we strive to equip all team members with Total Rewards (pay + benefits) to honor their service, support their health, manage their financial security, build their career, and thrive.

All MAHEC employees and learners will be required to receive the Flu vaccine or have an approved exemption.

MAHEC Talent Management is located at 121 Hendersonville Road, Asheville, NC 28803. Equal Opportunity Employer.

If you are interested in this role, and you have related experience and qualifications, we encourage you to apply or reach out to AskTalent@mahec.net for support in your job search process. You could be the talent we are seeking for this or other opportunities.