Our client is replacing multiple standalone clinical systems with a single provincial Clinical Information System through the Symbio Program. The Configuration and Access Management stream is establishing the role structures, access controls, governance and operating processes needed for a secure, sustainable and clinically effective CIS. The specialist will support the design, implementation and operational readiness of the Identity and Access Management (IAM) and Role-Based Access Control (RBAC) framework. Working with clinical, operational, privacy, cybersecurity, IAM, human resources and technical teams, the specialist will ensure access supports clinical workflows, patient safety, privacy obligations and organizational policies.
Key Responsibilities
- Lead current-state assessments, stakeholder interviews and workshops; document access models, workflows, business requirements and future-state processes.
- Support the CIS access management strategy and RBAC framework; identify and validate clinical, administrative and support roles.
- Develop role catalogues, access matrices and role definitions, applying least-privilege and separation-of-duties principles.
- Define provisioning, modification, suspension and deprovisioning requirements, emergency break-glass access, and access review and recertification processes.
- Analyze user populations and existing access assignments; support role mining and role engineering, validate models against clinical workflows, and identify conflicts, overlaps and access risks.
- Document business, operational, privacy, security and compliance requirements; maintain process maps, requirements traceability and decision records.
- Develop access governance processes and procedures; coordinate cross-functional decisions, track risks and dependencies, and present recommendations to project leadership and governance committees.
- Translate approved role designs into CIS configuration requirements; support configuration validation, security-role testing, user acceptance testing and go-live readiness.
- Prepare operational transition and support processes; mentor New Brunswick program personnel and transfer skills, documentation and practices for long-term sustainment.
Must Haves
- Bachelor s degree in Computer Science, Business Administration, Health Informatics or a related discipline. An equivalent combination of education and experience may be considered.
- 5+ years of business analysis experience supporting large-scale healthcare or enterprise technology initiatives, including requirements gathering, workshop facilitation, use case and process analysis, detailed design, decision records and business analysis documentation.
- 3+ years of experience in IAM, access governance or RBAC.
- 5+ years of experience working with clinical stakeholders, operational leaders or healthcare organizations.
- 3+ years supporting provider-based healthcare information systems, including large-scale CIS, Electronic Medical Record (EMR) or Electronic Health Record (EHR) implementations.
- Proficiency in Microsoft Word, Excel, PowerPoint, Visio and Teams.
Nice to Haves
- 3+ years in each relevant area: healthcare RBAC design, role engineering or access governance; large-scale CIS implementation; translating clinical workflows into access and security requirements; developing role catalogues, access matrices and segregation-of-duties models; and analyzing privacy legislation, access auditing or patient information protection requirements.
- 2+ years in user population analysis, role mining or entitlement analysis, and 2+ years presenting recommendations to executives, directors, clinical leaders and governance committees.
- New Brunswick healthcare experience with Horizon, Vitalit , SNB or provincial healthcare services is a strong asset.
- Strong verbal and written communication, facilitation and presentation skills in both French and English are strongly preferred.
