Job Description

POSITION: Credential Manager

LOCATION: Remote

COMPANY:

HealthMark Group is a leading provider of health IT solutions for healthcare providers across the country. By leveraging technology to reimagine the business of healthcare, HealthMark transforms administrative processes into seamless digital solutions. HealthMark Group was founded in 2006 with corporate headquarters in Dallas, TX and has been named to both the Dallas 100 and the Inc. 5000 for multiple years in a row as one of the fastest growing companies in the region and in the country.

HealthMark Group is growing and looking for a bright, energetic, and motivated candidate to join our team. This is a manager-level position and an exciting opportunity for an organized, detail-oriented professional looking to continue their career with a fast-growing company. The Credential Manager is responsible for credential and access management across more than 1,000 client systems, supporting 500+ users and 800+ clients. This position plays a critical role in maintaining secure access, operational continuity, and compliance across HealthMark's client base. This role involves ensuring secure storage, access control, and systematic auditing of credentials to prevent unauthorized access and potential security breaches. The ideal candidate will possess a strong background in cybersecurity and IT management, along with exceptional organizational skills and attention to detail.

Key Responsibilities:

• Follow and implement robust password management policies and procedures to secure access to client EMR systems.
• Maintain a secure repository for all organizational passwords, ensuring encrypted storage and controlled access across all operational teams.
• Regularly ensure passwords are updated in compliance with security best practices and regulatory requirements.
• Monitor and manage access rights to EMR systems, ensuring only authorized personnel have access based on their role and necessity.
• Support all teams ensuring enough credentials are available to support operations.
• Coordinate with Client Advocates, Clients, and Operational Teams to ensure all additions, changes, and removals are executed in a timely manner while escalating issues to management.
• Respond promptly to access disruptions or compromises by conducting thorough investigations and restoring secure access.
• Maintain a detailed log of all access issues and resolutions via ticketing system and generate regular reports on access integrity and security incidents for senior management.
• Collaborate with IT security teams to enhance cybersecurity measures and implement best practices for credential management.
• Train and guide staff in secure password practices and the importance of protecting sensitive client information.
• Ensure all staff are trained and onboarded to HealthMark Group’s password management platform.
• Coordinate with partner teams and ensure adherence to policies.

Qualifications:

• Bachelor's degree or equivalent experience in relevant field
• Minimum of 3 years’ experience in IT security or password management roles, preferably in a healthcare or sensitive data environment.
• Strong understanding of compliance regulations affecting EMR access and data security (e.g., HIPAA).
• Proficient with password management software and encryption technologies.
• Excellent problem-solving skills and the ability to manage crises effectively.
• Exceptional communication skills and the ability to explain technical details to non-technical stakeholders.

Note: This job description is intended to provide a general overview of the position and does not encompass all job-related responsibilities and requirements. The responsibilities and qualifications may be subject to change as the needs of the organization evolve.

This role does or may require regular access to Protected Health Information (PHI) and/or confidential client data. The incumbent must demonstrate a strong understanding of confidentiality requirements, adhere to all HIPAA regulations and organizational privacy and security policies, and report any known or suspected unauthorized access, use, or disclosure of PHI immediately to the Privacy Officer or Information Security team. This position requires timely completion of all required company-sponsored and regulatory training programs