IT Auditor

Medclinicx; Austin (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Med Clinic X in Austin, TX is seeking an IT Auditor to evaluate healthcare SaaS platforms, cloud infrastructure, and digital health systems for compliance with HIPAA, HITRUST, and SOC 2. You will assess IT controls, security frameworks, and operational processes across the United States.

The role focuses on auditing SaaS portals, cloud services, EHR/EMR integrations, data protection, and governance, with collaboration across engineering and security teams to remediate findings and support

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, Accounting, or CS.
• Experience in IT auditing, compliance, or risk management.
• Strong understanding of IT systems and infrastructure security.
• Knowledge of security frameworks and auditing principles.
• Strong analytical, documentation, and communication skills.
• Preferred: experience in US healthcare or healthcare SaaS.
• Familiarity with HIPAA, HITRUST, or SOC 2.
• Certifications such as CISA, CISSP, or CISM.

Responsibilities

• Conduct audits of healthcare IT systems and infrastructure.
• Evaluate security controls, access management, and system policies.
• Identify risks and recommend mitigation strategies.
• Ensure compliance with healthcare IT standards and regulations.
• Review SaaS platforms, cloud systems, and applications.
• Assess EHR/EMR integrations for compliance and security.
• Validate data protection and patient information handling.
• Support governance frameworks for healthcare systems.

Skills

IT auditing

Compliance

Security controls

Documentation

Communication

Risk assessment

Education

Bachelor's degree in Information Systems, Cybersecurity, Accounting, or CS

Tools

HIPAA

HITRUST

SOC 2

Job description

Med Clinic X is a healthcare technology company building secure, compliant, and scalable digital health systems for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health infrastructure.

Our mission is to ensure every system we build meets the highest standards of security, compliance, and operational integrity.

Job Overview

We are seeking an IT Auditor to evaluate, assess, and ensure compliance of healthcare SaaS platforms, cloud infrastructure, and digital health systems.

You will analyze IT controls, security frameworks, and operational processes to ensure alignment with healthcare regulations and industry best practices across the United States.

Responsibilities

IT Risk & Compliance Auditing

• Conduct audits of healthcare IT systems and infrastructure.
• Evaluate security controls, access management, and system policies.
• Identify risks and recommend mitigation strategies.
• Ensure compliance with healthcare IT standards and regulations.
• Review SaaS platforms, cloud systems, and applications.
• Assess EHR/EMR integrations for compliance and security.
• Validate data protection and patient information handling.
• Support governance frameworks for healthcare systems.

Security & Controls Assessment

• Analyze cybersecurity controls across systems.
• Review IAM Identity and Access Management policies.
• Evaluate encryption, logging, and monitoring systems.
• Identify vulnerabilities in healthcare IT environments.

Reporting & Documentation

• Prepare detailed audit reports and findings.
• Document compliance gaps and remediation plans.
• Work with engineering and security teams on improvements.
• Support internal and external audit processes.

Qualifications

Required

• Bachelor's in Information Systems, Cybersecurity, Accounting, or CS.
• Experience in IT auditing, compliance, or risk management.
• Strong understanding of IT systems and infrastructure security.
• Knowledge of security frameworks and auditing principles.
• Strong analytical, documentation, and communication skills.

Preferred

• Experience in US healthcare or healthcare SaaS environments.
• Familiarity with HIPAA, HITRUST, or SOC 2 frameworks.
• Experience auditing cloud-based healthcare systems.
• Exposure to cybersecurity or DevSecOps environments.
• Certifications such as CISA, CISSP, or CISM.

Why Join Med Clinic X?

At Med Clinic X, you will help ensure the trust, security, and compliance of modern healthcare technology systems. You will:

• Audit real healthcare systems used across the US
• Work on cloud, SaaS, and AI healthcare platforms
• Strengthen security and compliance frameworks
• Collaborate with engineering and security teams
• Support healthcare regulatory readiness processes
• Grow HIPAA, HITRUST, and SOC 2 compliance expertise

Technical Core

IT Audit Methodologies HIPAA / HITRUST / SOC 2 Cloud Platforms (AWS/Azure) IAM & Access Control Review Risk Assessment & Reporting CISA / CISSP Certification

Key Systems Audited

Audit access controls, API security, and session management across SaaS portals.

Review cloud architecture, IAM policies, and encryption configurations for compliance.

Patient Data Security Systems

Evaluate PHI data handling, masking policies, and storage encryption standards.

EHR/EMR Integration Security

Assess authentication flows and data transmission security for EHR integrations.

Audit logging, model governance, and data input/output validation for AI systems.

Healthcare Compliance Frameworks

Map controls against HIPAA, HITRUST CSF, and SOC 2 compliance requirements.