Healthcare IT Security Specialist

Part-Time Health IT Security Specialist Job Summary We are seeking a part-time Health IT Security Specialist to enhance our healthcare organization's cybersecurity and HIPAA Security compliance. This role will focus on developing and implementing security education programs, minimizing scam risks, and ensuring the continuous improvement of our security practices, with a specific emphasis on protecting sensitive patient data and maintaining compliance with healthcare regulations. Key Responsibilities Security Education and Awareness: Develop and maintain a comprehensive security awareness program for healthcare staff Create engaging training materials and conduct regular sessions on cybersecurity best practices in healthcare settings Keep staff informed about emerging threats and scams targeting the healthcare sector Risk Management: Assess and minimize scam risks through proactive measures and staff education, with a focus on healthcare-specific threats (e.g., medical identity theft, insurance fraud) Conduct regular risk assessments and recommend mitigation strategies for protecting electronic health records (EHR) and other sensitive patient data Stay informed about the latest security trends and threats in the healthcare industry Security Procedures and Best Practices: Review and update existing security policies and procedures to align with healthcare industry standards Implement and maintain best-practice security procedures for protecting patient data and ensuring HIPAA compliance Continuously improve security measures to address evolving threats in the healthcare sector Disaster Planning, Implementation, and Evaluation Create an implementation plan to follow during unforeseen events Lead the implementation of the disaster plan when needed Evaluate the plan yearly and make changes to keep the plan up to date in accordance with best practices Compliance and Reporting: Ensure compliance with healthcare-specific regulations and standards (e.g., HIPAA, HITECH, GDPR for health data) Prepare regular reports on security status, incidents, and improvements Collaborate with other departments to address security concerns related to patient data and healthcare systems Health IT Systems Security: Work closely with the IT team to ensure the security of electronic health record systems, telemedicine platforms, and other healthcare-specific technologies Assist in implementing and maintaining secure access controls for clinical staff Participate in security audits of health IT systems and medical devices Qualifications Bachelor's degree in Information Technology, Computer Science, Health Informatics, or a related field 3+ years of experience in IT security, preferably in a healthcare setting Strong knowledge of cybersecurity principles, best practices, and current threats in healthcare Excellent communication and presentation skills Certifications preferred such as HCISPP (HealthCare Information Security and Privacy Practitioner), CompTIA Security+, or equivalent are preferred Required Skills Proficiency in developing and delivering security awareness training for healthcare professionals Experience with risk assessment and management in healthcare environments Knowledge of common security frameworks (e.g., NIST, ISO 27001) and their application in healthcare Familiarity with healthcare-specific laws and regulations (e.g., HIPAA, HITECH, GDPR for health data) Understanding of healthcare workflows and the unique challenges of securing patient data Part-Time Hours This position is part-time, with an expected commitment of 10-15 hours per week. Schedule flexibility may vary depending on project complexity.