IT Specialist & HIPAA Security Officer

About Us:

Svast Healthcare Technologies is a US-based Revenue Cycle Management (RCM) and medical billing company serving 200+ physician practices.

Position Summary:

Svast is seeking a detail-oriented IT Specialist & HIPAA Security Officer for a dual-function role: serving as the organization's designated HIPAA Security Officer, responsible for ePHI security and HIPAA Security Rule compliance, while also working general support tickets alongside the IT team.

Key Responsibilities:

HIPAA Security Officer

• Own the organization's HIPAA Security Rule compliance program, including policies, risk assessments, and the risk register/systems inventory
• Monitor access controls and audit PHI-handling systems (RevXL, CredXL, OrderXL, Payer XL); investigate and document security incidents
• Partner with the software development team to build HIPAA compliance into the SDLC — reviewing new features, data flows, and integrations involving PHI before deployment, and advising on secure design practices
• Support employee security training and review vendor risk (BAAs, contracts)

General IT Support

• Work IT support tickets alongside the broader team
• Support Microsoft 365 (Exchange, SharePoint, Entra AD, Intune, Defender), Windows 365 Cloud PC/Azure VDI, and credential/access management
• Handle onboarding/offboarding and device provisioning; troubleshoot VOIP (8x8) and VPN (NordVPN)
• Assist with basic AWS support tasks; document recurring issues in the IT knowledge base

Qualifications Required

• Bachelor's degree in IT, Computer Science, or related field (or equivalent experience)
• 2+ years in IT support or systems administration
• Prior experience in medical billing/RCM or another healthcare environment
• Prior experience as a HIPAA Security Officer, Privacy Officer, or Compliance Officer, with working knowledge of the HIPAA Security Rule
• Microsoft 365 administration experience and general helpdesk/troubleshooting skills
• Strong written English; able to work US business hours from a reliable, secure home office

Preferred

• Familiarity with AWS, credential management tools (e.g., Bitwarden), and remote device management (Intune/Windows 365)
• Security/development-adjacent knowledge: OWASP Top 10, auth patterns (OAuth, RBAC), encryption standards, secure API design, SDLC/CI-CD and Git familiarity, IAM/least-privilege design, PHI data classification, and BAA technical requirements for integrations.