IT Auditor

Med Clinic X is a healthcare technology company building secure, compliant, and scalable digital health systems for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health infrastructure.

Our mission is to ensure every system we build meets the highest standards of security, compliance, and operational integrity.

We are seeking an IT Auditor to evaluate, assess, and ensure compliance of healthcare SaaS platforms, cloud infrastructure, and digital health systems.

You will analyze IT controls, security frameworks, and operational processes to ensure alignment with healthcare regulations and industry best practices across the United States.

• Conduct audits of healthcare IT systems and infrastructure.
• Evaluate security controls, access management, and system policies.
• Identify risks and recommend mitigation strategies.
• Ensure compliance with healthcare IT standards and regulations.
• Review SaaS platforms, cloud systems, and applications.
• Assess EHR/EMR integrations for compliance and security.
• Validate data protection and patient information handling.
• Support governance frameworks for healthcare systems.

• Analyze cybersecurity controls across systems.
• Review IAM Identity and Access Management policies.
• Evaluate encryption, logging, and monitoring systems.
• Identify vulnerabilities in healthcare IT environments.

• Prepare detailed audit reports and findings.
• Document compliance gaps and remediation plans.
• Work with engineering and security teams on improvements.
• Support internal and external audit processes.

• Bachelor's in Information Systems, Cybersecurity, Accounting, or CS.
• Experience in IT auditing, compliance, or risk management.
• Strong understanding of IT systems and infrastructure security.
• Knowledge of security frameworks and auditing principles.
• Strong analytical, documentation, and communication skills.

• Experience in US healthcare or healthcare SaaS environments.
• Familiarity with HIPAA, HITRUST, or SOC 2 frameworks.
• Experience auditing cloud-based healthcare systems.
• Exposure to cybersecurity or Dev Sec Ops  environments.
• Certifications such as CISA, CISSP, or CISM.

At Med Clinic X, you will help ensure the trust, security, and compliance of modern healthcare technology systems. You will:

• Audit real healthcare systems used across the US
• Work on cloud, SaaS, and AI healthcare platforms
• Strengthen security and compliance frameworks
• Collaborate with engineering and security teams
• Support healthcare regulatory readiness processes
• Grow HIPAA, HITRUST, and SOC 2 compliance expertise

IT Audit Methodologies HIPAA / HITRUST / SOC 2 Cloud Platforms (AWS/Azure) IAM & Access Control Review Risk Assessment & Reporting CISA / CISSP Certification

Audit access controls, API security, and session management across SaaS portals.

Review cloud architecture, IAM policies, and encryption configurations for compliance.

Evaluate PHI data handling, masking policies, and storage encryption standards.

Assess authentication flows and data transmission security for EHR integrations.

Audit logging, model governance, and data input/output validation for AI systems.

Map controls against HIPAA, HITRUST CSF, and SOC 2 compliance requirements.