A medical coding auditor reviews medical records, coding accuracy and documentation practices for compliance with federal regulations and payer policies — the review side of coding rather than the production side.
Auditors work inside hospitals, physician groups and billing companies, at outside consulting firms, and on the payer side.
AAPC treats auditing as an advanced step and warns the CPMA exam is not intended for individuals lacking training or experience.
What a coding auditor does
Medical coders turn clinical care into the standardized codes that drive payment: BLS says medical coders assign the diagnosis and procedure codes used for patient care, population health statistics and billing purposes.
BLS counts that work inside its medical records specialists occupation, SOC 29-2072 — workers who compile, process and maintain patient files and may classify and enter patients' medical information into the healthcare coding system.
Our research found no separate coding-auditor occupation in BLS's classification.
An auditor steps back from that production work.
AAPC's CPMA credential, which the organization aims at medical auditing, validates expertise in reviewing medical records, coding accuracy and documentation practices for compliance with federal regulations and payer policies.
AAPC says CPMA-certified professionals are equipped to conduct internal and external audits, identify coding and documentation risks, and support organizations in maintaining compliance.
In plain terms, the auditor works from the record: re-reading the documentation behind codes already assigned, checking whether the codes and the note support each other, and recording what the review found.
The role goes by several names — coding quality auditor, coding compliance auditor and coding compliance specialist among them, with AAPC's career materials using clinical auditor for the same review work.
Types of coding audits
AAPC frames the work in two settings: CPMA-certified professionals are equipped to conduct internal audits and external audits.
- Internal audits. Read plainly: the organization reviews its own coded records in-house, as part of its coding quality and compliance work.
- External audits. Read plainly the other way: reviewers from outside the organization examine records and coding. AAPC counts healthcare consulting firms and risk adjustment vendors among the employers of coding and billing staff.
- Payer and government audits. CMS conducts Risk Adjustment Data Validation (RADV) audits to confirm that diagnoses used for Medicare Advantage payment are supported by medical records.
The payer side is scaling up.
In May 2025, CMS said it would audit all eligible Medicare Advantage contracts for each payment year in newly initiated audits and expedite the audits for payment years 2018 through 2024.
CMS said the technology behind the program would let it grow from about 60 Medicare Advantage plans audited each year to all eligible plans — about 550 — in newly initiated audits.
The records reviewed per plan would expand too, from 35 to between 35 and 200 depending on plan size.
Those were May 2025 announcements of intent, not a settled status quo — check CMS's own newsroom for where the RADV program stands today.
Who employs coding auditors
Our research found no auditor breakout in BLS's data, so its employer figures cover the whole medical records specialists occupation — coders and records staff alike.
BLS says the largest employers of medical records specialists in 2025 were hospitals (28%), offices of physicians (18%), professional, scientific and technical services (10%), administrative and support services (8%), and management of companies (7%).
AAPC lists the settings billing and coding staff work in beyond hospitals and physician offices: ambulatory surgery centers, walk-in clinics, long-term care, home health agencies, hospice, telehealth companies, labs and imaging centers.
AAPC also names employers away from patient care — software and DME vendors, insurance companies, government agencies, educational institutions, billing companies, risk adjustment vendors, healthcare consulting firms and some law offices.
The payer side has a visible anchor: CMS said in May 2025 it would increase its own team of medical coders from 40 to approximately 2,000 by September 1, 2025, to manually verify diagnoses flagged by technology in RADV audits.
That was an announced target, not a confirmed headcount.
BLS pay data shows the occupation's footprint with insurers: OEWS counted 6,150 medical records specialists working for insurance carriers and related activities in May 2025, at a $62,040 median annual wage.
That is an industry row for the whole occupation, not an auditor count.
Current openings are collected on the board's coding auditor jobs page.
Credentials for coding auditors
AAPC's Certified Professional Medical Auditor (CPMA) is its medical auditing credential.
AAPC says it validates proficiency in reviewing medical records, coding accuracy and documentation practices for compliance with federal regulations and payer policies.
AAPC adds that CPMA-certified professionals are equipped to conduct internal and external audits, identify coding and documentation risks, and support organizations in maintaining compliance.
AAPC is direct about the bar: the CPMA certification exam is a difficult, high-level examination and is not intended for individuals lacking training or experience.
Two adjacent AAPC credentials overlap with audit work.
The CEMC validates a medical coder's advanced expertise in evaluation and management (E/M) coding, and AAPC describes it as aimed at coders working in physician practices, multispecialty groups, hospitals and compliance or auditing roles.
The CPCO is designed for coders, billers, auditors and administrators who want to expand into compliance leadership.
Alongside those sit AAPC's four main core coding certifications — CPC, COC, CIC and CRC — plus the CPB for billers.
BLS frames certification in this occupation as something employers may require or prefer.
Exam and credential rules change
How coders become coding auditors
The route in runs through coding, not around it.
AAPC lists clinical auditor — reviewing medical records for accuracy and compliance — as an advanced opportunity, and it warns that the CPMA exam is not intended for individuals lacking training or experience.
Start with the coding foundation.
BLS says medical records specialists typically need a postsecondary certificate to enter the occupation, although some qualify with a high school diploma and others need an associate's or bachelor's degree, and that certification may be required or preferred.
Then build the background the exam assumes: AAPC says CPMA examinees should have CPMA training and/or experience auditing physician services, including E/M.
The CPMA is a stand-alone credential, with no requirement to hold a CPC, COC or CPC-P first.
As that experience builds, add the audit credential: AAPC's career-changer path suggests adding specialty certifications in auditing (CPMA), compliance (CPCO) or revenue cycle management (RCMS).
An internal move counts too.
Coders who step into their employer's own audit function build the kind of internal-audit experience AAPC describes, without waiting for an outside firm to open a seat.
Coding auditor pay
Our research found no coding-auditor line in BLS data.
The closest available group is medical records specialists (SOC 29-2072), an occupation that also includes records staff who do not code.
BLS puts that group's median annual wage at $51,140 as of May 2025, and projects 8% employment growth from 2025 to 2035, much faster than the average for all occupations.
AAPC's own figures are survey averages, not BLS data: its 2026 salary report, a survey of self-selected, mostly AAPC-member respondents, puts Certified Professional Medical Auditors at an average of $81,591 in 2025, up 19.7% from 2020.
The state and metro tables behind the BLS number are collected on our coder salary page.
Career information, not coding, billing-compliance, legal or tax advice. Confirm credential details with AAPC and current wage data with BLS.