Senior Clinical Iam & Rbac Business Analyst - Healthcare

A Bachelor's level University degree in Computer Science, Business Administration, Health Informatics, or a similar discipline. An equivalent combination of education and experience may be considered
Required EducationA Bachelor's level University degree in Computer Science, Business Administration, Health Informatics, or a similar discipline. An equivalent combination of education and experience may be considered
Required Skills
Business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis, detailed design activities, decision records, and developing business analysis documentation supporting large-scale healthcare or enterprise technology initiatives (5+ Years)
Experience working with Identity and Access Management (IAM), access governance, or Role-Based Access Control (RBAC) (3+ Years)
Demonstrated experience working with clinical stakeholders, operational leaders, or healthcare organizations (5+ Years)
Proficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams (5+ Years)
Experience supporting provider-based healthcare information systems, including large-scale Clinical Information System (CIS), Electronic Medical Record (EMR), or Electronic Health Record (EHR) implementations (3+ Years)
Preferred Skills
Demonstrated experience leading RBAC design, role engineering, or access governance initiatives in healthcare environments (3+ Years)
Demonstrated experience supporting implementation of large-scale Clinical Information Systems (3+ Years)
Demonstrated experience translating clinical workflows into access and security requirements (3+ Years)
Demonstrated experience developing role catalogues, access matrices, and segregation-of-duties models (3+ Years)
Demonstrated experience analyzing privacy legislation, access auditing, or patient information protection requirements (3+ Years)
Demonstrated experience conducting user population analysis, role mining, or entitlement analysis activities (3+ Years)
Demonstrated experience presenting recommendations to executives, directors, clinical leaders, and governance committees (3+ Years)
Candidate has New Brunswick healthcare experience, including Horizon, Vitalité, SNB, or provincial healthcare services (1 Year)
Verbal and written communication, facilitation, and presentation skills in both French and English are strongly preferred
Our client is seeking a CIS Access Management Specialist to support the development, implementation, and operational readiness of the Identity and Access Management (IAM) and Role-Based Access Control (RBAC) framework for the provincial Clinical Information System (CIS). The resource will work with clinical, operational, privacy, cybersecurity, IAM, human resources, and technical teams to define access requirements, document business processes, develop role catalogues, support governance decisions, and coordinate activities required to establish a secure, auditable, and operationally sustainable access management model for the CIS
Job Duties
The successful candidate will lead current-state assessments, future-state design activities, stakeholder engagement, requirements analysis, role engineering workshops, governance processes, and operational readiness planning to ensure the CIS access model supports clinical workflows, privacy obligations, patient safety, and organizational policies
Access Management and RBAC:
Assist in the development of the CIS access management strategy and RBAC framework
Facilitate identification, analysis, and validation of clinical, administrative, and support roles
Develop and maintain role catalogues, access matrices, and role definitions
Support design of least-privilege and separation-of-duties principles
Define provisioning, modification, suspension, and deprovisioning requirements
Support emergency access ("break glass") process design
Support access review and recertification processes
Business Analysis:
Conduct current-state discovery and documentation
Facilitate stakeholder interviews, workshops, and decision sessions
Gather, analyze, and document business, operational, privacy, security, and compliance requirements
Create process maps, workflow diagrams, and future-state business processesMaintain requirements traceability and decision records
Governance and Readiness:
Support development of access governance processes and operating procedures
Coordinate decisions between IAM, privacy, cybersecurity, HR, clinical operations, and CIS teams
Track risks, issues, dependencies, and assumptions
Support change readiness and operational transition activities
Develop recommendations and presentations for governance committees and project leadership
Data Analysis and Validation:
Analyze user populations and existing access assignments
Support role mining and role engineering activities
Validate access models against organizational structures and clinical workflows
Identify conflicts, overlap, and access risks
CIS Access Configuration Support:
Support translation of approved role designs into CIS configuration requirements
Assist with validation and testing of access configurations
Support user acceptance testing activities related to security roles and access
Coordinate access readiness activities leading to go-live
Deliverables
Discovery and Assessment Deliverables:
(Current state Access, Current State process, User population analysis)
Requirements Deliverables:
(Business Requirements Document [BRD], Functional Requirements, Non-Functional Requirements, Privileged Access Requirements, Requirements Traceability Matrix)
RBAC Deliverables:
(Role Catalogue [Financial, Clinical, Administrative], Access Matrix, Role to Function, Break-Glass Access Model)
Governance Deliverables:
(Access Governance Framework, Decision Records, Risk/Issue logs, Access request and approval workflows)
Operational Readiness Deliverables:
(Provisioning and Deprovisioning, Support, Go-live readiness, transition to operations)
**Only those lawfully authorized to work in the designated country associated with the position will be considered.**
**Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**
About Rose
Founded in 1993
Office Locations Across the U.S.
150+ Clients: Corporations and Government Agencies
Employee Oriented Company
Challenging Assignments Across the U.S.
Continuous Professional Development
EMPLOYEE COMMENTS
We want you to work with us, but don't take our word for it. Take a look at this sampling of employee comments. They speak for themselves.
#J-18808-Ljbffr