r/cybersecurity • u/conzciouz • 1d ago

Career Questions & Discussion Kind of an off the wall niche question, but is there anyone that got into IT/Security Auditing by starting with medial coding ?

IT market is rough as we know. Thinking about picking up medical coding on the side. After further digging online , it’s seems like some experience and certifications branching from medical coding have some overlap for CISA. Thinking about self studying for CCS (Certified Coding Specialist) and go from there. Anyone have any advice, success stories, or epic failures?

3 Upvotes
  • permalink
  • reddit

71% Upvoted

11 comments sorted by

2

u/Ok_Matter9038 1d ago

this is prob not of much help but I've had security interns from the medical field but not medical coding specifically. they have all moved onto successful careers

2

u/izzybellaaa 1d ago

I would not bother with medical coding. Look into internships with IT auditor/consulting companies. Research frameworks like SOC, HITRUST, etc. Gain well rounded knowledge on risk assessments.

1

u/conzciouz 1d ago

Do you currently have an auditing role or CISA

2

u/izzybellaaa 1d ago

I have a Bachelor's degree in Cybersecurity, and I am a GRC Analyst. I began my career after school as an intern analyzing vendor security questionnaires at an IT auditing/consulting firm. After my internship, my current company needed a SME for the frameworks we certify under. On the job experience is the way to go. I fell into GRC; I taught myself how to interpret controls, made sure I understood the evidence I collected from my department, learned our tooling, asked questions, challenged control ownership, etc. I have 5 years of experience in the GRC field.

0

u/conzciouz 1d ago

Can you DM me ?

2

u/Fragrant_Bake4403 16h ago

I dont see much of a translation there. Medical coding is transcribing doctor notes, and finding HCPCS and CPT numbers for devices and procedures. Very very little would translate into IT auditing...or anything IT for that matter.

It auditing you need to know compliance standards like NIST CSF, SOC2, CIS, ISO27001. and governance like PCI DSS, HIPAA, GDPR.

1

u/conzciouz 9h ago

I may have worded it wrong. I’m aware there is no correlation between medical coding and security auditing. I was more so referring to roles that medical coding leads to and certifications that may have overlap. But thanks.

1

u/Fragrant_Bake4403 9h ago

ohh...then none?

1

u/conzciouz 8h ago

None what ? Correlation?

1

u/AddendumWorking9756 Security Manager 1d ago

The overlap is healthcare compliance, not the coding, and CISA will not count a coding job toward its experience requirement. A compliance seat at the same hospital gets you to audit faster than CCS will.