Senior Identity and Access Management Analyst

We are more than a health system. We are a belief system. We believe wellness and sickness are both part of a lifelong partnership, and that everyone could use an expert guide. We work hard, care deeply and reach further to help people uncover their own power to be healthy. We inspire hope. We learn, grow, and achieve more – in our careers and in our communities.

Job Description Summary:

JOB SUMMARY

• Reports to Manager of Identity and Access Management and will have no direct reports.
• The Senior Identity and Access Management Analyst will be responsible for daily operational security administration and access control support to the OhioHealth Identity and Access Management (IAM) program.
• The Senior Identity and Access Management Analyst supports Security access control initiatives throughout the enterprise.
• The Senior Identity and Access Management Analyst acts as a resource for OhioHealth departments and business units on technical and / or operational security matters.
• The Senior Identity and Access Management Analyst participates in the planning, development, and deployment of IAM access control standards and processes into production. Develop supporting documentation and procedures ┐for these processes. Evaluate and refine existing processes.
• The Senior Identity and Access Management Analyst analyzes user access needs, develop access roles and add/change/delete user access accordingly, through provisioning tool(s) or directly in system / application. Assist in special projects, such as application go-lives, upgrades, enhancements, etc.

Responsibilities And Duties:

15% Security Administration Perform daily systems security administration functions, including managing customer access requests; create, modify and/or delete customer profiles and accounts; reset passwords; and maintain appropriate documentation.
15% Build Roles Administer and build new security roles, classes and / or rules for IAM tool and / or appropriate systems or applications based on customer needs and compliance approval; maintain documentation accordingly. 
15% Log Analysis Analyze and integrate access controls-specific log information, including operating system-level access logs. Perform event correlation as required. Interpret and present audit findings into clear, concise reports for EIS management.
10% Issue Resolution Facilitate the identification and resolution of IAM security issues or questions by involving identified OhioHealth associates and other stakeholders; escalate when appropriate.
10% Control Reviews Coordinate regular reviews of the IAM systems to identify real and/or potential security and/or access weaknesses. Based on findings, develop fixes / mitigations which meet enterprise and customer needs cost effectively and support our mission and patient care standards.
10% Process Maintenance Maintain process / application files in the various IAM computer systems to ensure maximum system performance and integrity.
10% Security Assessment and Mitigation Receive, research and interpret identity proofing and / or security access threat warnings from internal tools, external activities, and outside sources/colleagues. Coordinate regular reviews of the IAM systems to identify real and/or potential security and/or access weaknesses. Based on findings, develop fixes / mitigations which meet enterprise and customer needs cost effectively and support our mission and patient care standards.
5% Business Analysis Working with Management, other IAM team members and business / clinical customers, define appropriate role-based access by job / professional responsibility and maintain on-going access matrix to support our corporate mission and patient care.
5% Be Subject