Information Security and Access Control Analyst I

About the role

This position serves as the primary Agency Information Security Coordinator (AISC) that administers the information security functions within the agency and all information security matters. Expert for addressing and solving complex information technology problems and data issues related to security access and control. Has primary responsibility for supporting information systems security requirements in agency related to maintaining authorized access and control to all secured applications and systems under the direct control of the Community Services Board (CSB). Maintains and provides access to local electronic health records (EHR) system, shared mailboxes, distribution lists, shared drive, powerDMS, DocuSign, IT system configuration and other local applications. Works under the general administrative supervision of CSB manager for Security and Access Control. Provides first tier helpdesk support using the Enterprise Service Management Platform for any access and security related questions. Supports the enforcement of county information systems security policies and procedures and adherence to Health Insurance Portability and Accountability Act (HIPAA) privacy requirements regarding protection of electronic personal health Information and personal identifiable information. Creates and maintains processes for ensuring new and existing agency staff and contractors are appropriately given network and application access as needed based on their roles and responsibilities. Coordinates with internal agency departments and county Department of Information Technology to obtain and maintain appropriate access to secured systems. Keep current all agency security procedures, including working with the CSB Office of Compliance & Risk Management regarding access and security related regulations to meet the information system security requirements mandated by the county. Responsible for performing periodic audits and working with county HIPAA Privacy Office regarding any external or county-initiated security audits. Perform other duties as assigned to support the EHR and reporting needs of the agency.

Responsibilities

• Serves as primary Agency Information Security Coordinator (AISC) administering information security functions within agency and all information security matters.
• Expert for addressing and solving complex IT problems and data issues related to security access and control.
• Primary responsibility for supporting information systems security requirements related to maintaining authorized access and control to all secured applications and systems under direct control of CSB.
• Maintains and provides access to local EHR system, shared mailboxes, distribution lists, shared drive, powerDMS, DocuSign, IT system configuration and other local applications.