Position Summary:The Identity and Access Management (IAM) Analyst is responsible for day-to-day user access operations within the Cybersecurity operations team, including ensuring timely user access provisioning/deprovisioning; user access policy, standards, and process improvements via task automation and efficient workflows ensuring least privilege access to Guthrie systems and information.Core responsibilities include analyzing requirements, documenting standards, and administering IAM functions:Identity Governance and Administration, Privilege Access Management (PAM), Single Sign-On, Imprivata tap and go, federation, Multi-Factor Authentication, user access policy and standards, user access request management, and provisioning (Azure AD, Active Directory, LDAP and EPIC EMR security).Education, License & Cert:High school diploma required.Bachelors preferred.Epic Security certification or within a year of hire.Professional security certification or within 12 months of hire/in role.Experience:3 to 5 years of experience as an information security analyst or IT business analyst2years' experience with technical experience of PAM, IAM tooling and processesStrong analytical, organizational, and planning skillsExperience with scripting languages.(PowerShell, Perl, Python, Ruby, etc.)Strong verbal and written skills to develop technical documentation, training, and presentationsDemonstrated commitment to continuous learning via training, self-study and formal education to maintain technical proficiency within the cybersecurity domainDemonstrated experience with IT controls design and implementationEssential Functions:Identity and Access Management:Understand the scope of the health services Guthrie provides its patients and the threat landscape that may disrupt these servicesDefine user access policy, standards, roles and procedures for security, efficiency, and scalabilityEffectively communicate user access policy and standards to stakeholdersParticipate in project work to ensure user access controls are addressed in technology designs, workflows and operating proceduresParticipate and/or lead AD, PAM, IAM, and MFA tool installation, integration, support, and operationsParticipates in the development, validation, and execution of comprehensive IAM use cases and test plans.Identifies, analyzes, and resolves data and complex user access workflow issues.Demonstrates ability to diagnose and resolve AD, PAM, MFA and IAM issues and to recommend areas for process improvement or innovation to management.Provisioning and deprovisioning of regular, privileged, and Epic EMR user accessMaintain effective relationships with key technology vendors, industry professionals, security forums and professional associations.Support System compliance and Information Security certification:Stay informed of cyber/information security laws, regulations, and standards that may affect the information security and risk management programParticipate in conducting an annual user entitlement review processes across the organizationAid in documenting IAM control gap findings, impacts and recommendations to managementDevelop and maintain IAM playbooks documenting user access controls, standards and proceduresEstablish actionable metrics to support the IAM/cyber program and influence behaviorsEnsure IAM controls are operating effectively supporting HIPAA Security and Privacy Rule complianceSupport the effort to acquire and sustain HITRUST CSF certificationSupport responding to Information Security audits and risk assessments requested by regulatory agencies, payers, and other relevant entitiesOther Duties:Other duties as assigned.Rev:2-12-2024. Experience: 3 years required