How to Hire a Coding Manager: Credentials, Sourcing and Screening

Hire against the span of the job, not the title. O*NET's task list for medical and health services managers — the closest federal occupation group for a coding manager seat — includes directing, supervising and evaluating staff work, and conducting fiscal operations such as budgets and rates for services. It also includes establishing work schedules and assignments according to workload. BLS describes health information managers as ensuring that databases of patient records are complete, accurate and accessible only to authorized personnel.

The people side has a specific shape. The coders this manager runs perform O*NET's medical records specialist tasks: identifying, compiling, abstracting and coding patient data using standard classification systems, and resolving or clarifying codes or diagnoses with conflicting, missing or unclear information by consulting doctors. Expect your manager to coach that second habit — asking rather than guessing — across the whole team.

The operating calendar is unforgiving. ICD-10-CM diagnosis codes and ICD-10-PCS procedure codes update every October 1 — CMS has posted FY2027 files covering discharges and encounters from October 1, 2026 through September 30, 2027 — and CMS publishes Medicare NCCI procedure-to-procedure edits and medically unlikely edits with quarterly updates. Ask candidates how they ran their last October 1 code load and their quarterly edit review; the answer shows working habits better than any résumé line.

Measurement is the other day-one competence. OIG's 1998 billing-company guidance suggests tracking statistical data on claim rejections by code and using a baseline that includes the frequency and percentile levels of CPT and HCPCS codes to spot problem areas. A candidate who talks in those terms — baselines, tracking, follow-up — is describing the seat accurately.

The worker-side view of the role — what a coding manager does — covers the ladder and the day-to-day in the coder's own terms. This page stays on your side of the table.

Certification is a hiring requirement you set, never a license, and the credentials below matter because of what the issuing bodies say they validate. For the coders this manager will run, BLS says employers may prefer to hire certified medical records specialists, or may expect applicants to earn certification shortly after being hired. Set the bar for the manager at least as high as the bar for the team.

Start with a coder credential matched to your claim mix. AAPC describes the CPC as validating comprehensive coding knowledge across outpatient and physician services, including ICD-10-CM, CPT and HCPCS Level II, compliance, payer rules and reimbursement. For facility-side work, AAPC describes the COC as validating coding for outpatient hospital and facility services, including same-day surgeries, emergency department visits and hospital outpatient clinic services, and the CIC as validating ICD-10-CM and ICD-10-PCS coding for hospital inpatient services and MS-DRG assignment rules.

AHIMA's line runs parallel. AHIMA describes the CCS as demonstrating tested skills in data quality and accuracy and mastery of coding proficiency, and requires CCS holders to complete CEUs and pay a recertification fee over each two-year certification period. The CCS-P is the physician-based exam, covering ICD-10-CM and CPT/HCPCS content — and AHIMA's CCS and CCS-P exams delivered on or after May 1, 2026 require the 2026 code books. Read those published scopes against your claim mix. The CPC validates knowledge across outpatient and physician services, and the CCS-P is the physician-based exam. The COC covers outpatient hospital and facility services, and the CIC covers hospital inpatient services. The CCS is the credential AHIMA tests for data quality, accuracy and coding proficiency.

Two management-track credentials sit on top of a coder credential for this seat. AAPC describes the CPCO (Certified Professional Compliance Officer) as validating the ability to design, manage and evaluate compliance programs using compliance program guidance and fraud and abuse laws. AHIMA says RHIAs manage people and operational units and help prepare budgets, and RHIA exam eligibility generally requires completing a CAHIIM-accredited HIM program at the baccalaureate or master's level, or an approved post-baccalaureate certificate. AAPC also describes the CPPM as validating management of practice business operations including compliance, revenue cycle, HR, health information and governance — a fit where one manager owns coding and billing together.

On degrees, BLS says medical and health services managers typically need a bachelor's degree plus work experience in an administrative or clinical role in a healthcare facility, though some employers hire with an associate's degree and others prefer a master's. Weight the management track record as heavily as the diploma: the credential is verifiable, but the schedules, audits and budgets are the work.

Verify before you post: credential scopes, exam code-book editions and recertification terms change. Confirm what each credential currently covers with AAPC or AHIMA before a requirement reaches your posting, and see our guide to verifying credentials before you hire for the check itself.

Look inside first. BLS says medical records specialists may advance to health information technologist or medical and health services manager roles after completing a higher certification program or earning a degree in health information technology. Your strongest lead coder already knows your systems, payers and providers; the credential or degree line tells you what to fund to get them ready.

The outside market is competitive at this level. BLS projects employment of medical and health services managers to grow 24.2% from 640,400 in 2025 to 795,500 in 2035, with about 62,300 openings per year on average. That federal category covers every medical and health services manager, hospital executives included, so a coding seat competes with all of them. In an AHIMA-commissioned NORC survey of health information professionals (fielded August 2023, released November 1, 2023), 66% reported persistent staffing shortages over the past two years.

Source where credentialed coders already gather. AAPC says its members have access to nearly 400 local chapters that collectively host over 3,000 events per year, with finding or sharing job opportunities listed among the chapter benefits. AHIMA is a federation of state-level Component Associations, with state associations such as CHIA in California and NYHIMA in New York. The people a coding manager oversees cluster where the occupation clusters: per BLS, hospitals employed 28% of medical records specialists in 2025 and offices of physicians 18%.

Then post where the audience is. Our guide to where to post billing and coding jobs compares the boards and channels for this field. The coding manager jobs live on this board show what competing employers are asking for right now — a free benchmark before you set your own requirements.

Verify the credential at the issuing body — never from a certificate image or a résumé line. AAPC's online credential verification tool lets employers check a member's AAPC credentials or status using the member ID and last name, or email and last name, and returns the credential, earned date, renewal date and status. Its terms make the tool for verifying an individual's credentials only, so confirm the identifier belongs to the person you are checking. AHIMA verifies credentials with the person's last name plus the credential number or AHIMA ID. Ask for the identifier during your application process.

Then test the coding judgment the manager will coach. AAPC markets Practicode Team Assessments to employers for evaluating candidates and staff on standardized real-world coding cases across 19+ specialties, tracking accuracy and speed — one structured option, described by AAPC itself. A work sample built from your own de-identified claim types works just as well. Whatever you require has to meet hiring-law basics: the EEOC says a test you require applicants to take must be necessary and related to the job and may not exclude people based on protected characteristics. The ADA also requires reasonable accommodation in test administration for qualified applicants with disabilities, absent undue hardship. Our guide to testing coders before you hire covers the build.

For the management layer, ask for artifacts rather than adjectives: the audit schedule they ran, the rejection tracking they kept, a training plan they built. OIG advises that when coding staff find a physician's documentation unclear or conflicting, they should ask the physician for clarification — a candidate who describes building that escalation path into workflows and training is describing the job. Score every finalist on the same rubric so your comparisons survive the debrief.

The background check has an OIG anchor at this level. OIG's 1998 billing-company guidance says that for new employees with discretionary authority over compliance-related decisions, billing companies should conduct a reasonable and prudent background investigation including a reference check, and should require applicants to disclose criminal convictions or exclusion actions. Where your coding manager sets coding policy, signs off on audits or decides what gets billed, the seat carries exactly the discretionary authority that guidance describes. If you run a billing company, the recommendation reaches this hire; a physician practice or hospital is not that guidance's subject, but the step travels well.

Start with exclusion screening. OIG says entities should check the LEIE before employing or contracting with individuals and periodically afterward — and because OIG updates the list monthly, OIG says screening each month best minimizes potential overpayment and civil monetary penalty liability. OIG's General Compliance Program Guidance lists monthly screening of the LEIE and state Medicaid exclusion lists among its examples of routine compliance monitoring.

The exposure is concrete. OIG states that anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties, and OIG's FAQ confirms the payment ban covers all administrative and management services the excluded person furnishes — which reaches a manager's work. Under 42 CFR 1003.200(b)(4), OIG may also impose a penalty on a person who arranges or contracts, by employment or otherwise, with an individual or entity the person knows or should know is excluded from federal health care programs.

Plan the separation of duties before the start date. OIG's GCPG recommends that small entities that cannot support a compliance officer designate a compliance contact who, whenever possible, should not be involved in billing, coding or claim submission, and who reports at least quarterly to the owner or CEO. Read that against this hire: a coding manager is involved in coding, which is exactly the involvement the guidance's whenever-possible rule asks a compliance contact to avoid — so the contact role fits better outside the coding chain.

The compliance program this manager runs or feeds has a published shape. The GCPG organizes compliance programs around seven elements, running from written policies and procedures through risk assessment, auditing and monitoring, to responding to detected offenses and developing corrective action. OIG's GCPG recommends that claims reviews and audits include a review of medical necessity by an appropriately credentialed clinician. OIG's 2000 physician-practice guidance, meanwhile, recommends at least an annual coding and billing training program for everyone involved in coding and billing, with new coding and billing staff trained as soon as possible and working under an experienced employee until training is complete. The accuracy stakes are statutory: the False Claims Act (31 U.S.C. 3729) defines "knowingly" to include deliberate ignorance or reckless disregard of the truth, and requires no proof of specific intent to defraud.

Overpayments carry their own clock. Under 42 CFR 401.305, a Medicare overpayment must be reported and returned by the later of 60 days after it is identified or the date a cost report is due. The deadline can be suspended up to 180 days while a timely good-faith investigation of related overpayments is under way. When your coding audits surface one, the manager owns the escalation and the calendar.

HIPAA training lands at the start, too. The Privacy Rule (45 CFR 164.530(b)(1)) requires a covered entity to train all members of its workforce on its PHI policies and procedures as necessary and appropriate for their functions. New workforce members must be trained within a reasonable period after joining — the rule sets no fixed annual frequency — and the training must be documented. The Security Rule adds a security awareness and training program for all workforce members including management.

These rules belong to the OIG and HHS, and they change. Confirm your screening cadence, compliance structure and training plan with your compliance advisor or health-care counsel.

All three models work; they fail differently. On-site gives a coaching-heavy manager the tightest contact with the coders they develop. Remote widens a thin candidate pool: in the 2023 AHIMA/NORC survey, 21% of respondents named lack of remote or hybrid flexibility as the most impactful driver of turnover, and 40% of respondents said their organization increased remote workers while addressing recruitment problems. If the seat is remote, the safeguards travel with it. The Security Rule's workstation-use and physical-safeguard policies apply to all workstations that access ePHI, home workstations included. Its access-control specifications add required unique user identification, addressable automatic logoff and encryption, and audit controls.

Outsourcing the coding function replaces the hire with a vendor relationship — and swaps a recruiting problem for an oversight one. HHS lists billing, claims processing and practice management among the activities that make a vendor a HIPAA business associate when PHI is involved. BAAs must contain the elements in 45 CFR 164.504(e), and a business associate must have a BAA with any subcontractor that creates, receives, maintains or transmits PHI before disclosing PHI to it. Since the HITECH Act and HHS's 2013 Omnibus final rule, business associates have also been directly liable for certain HIPAA violations.

If the decision spans more than this one seat, the hub guide to hiring billing and coding staff works the in-house, remote and outsourced question across every role. Whichever model you choose, the verification, testing and exclusion steps above do not disappear — only the person performing them changes.

Retention starts with why the role turns over. In the 2023 AHIMA/NORC survey, compensation was the top driver of health information turnover; burnout was ranked the second most impactful driver, by 28% of respondents, and 41% of respondents in revenue-cycle vendor settings ranked burnout first. On the recruiting side, local pay constraints ranked top-three for 59% of respondents, salaries not competitive with remote jobs elsewhere for 51%, and a limited local talent pool for 53%. What organizations changed in response: 45% increased pay, 40% increased remote workers, 28% increased training opportunities and 22% increased reliance on automation and machine learning, while 20% took no action.

Build the manager's own ladder, not just the team's. The growth credentials are the ones from the requirements section above: CPCO for the compliance track, or RHIA for the HIM operations track, whose eligibility generally runs through a CAHIIM-accredited baccalaureate or master's program. Fund the CEUs and renewal fees on the coder credential they hold, too — AHIMA requires CCS holders to complete CEUs and pay a recertification fee over each two-year certification period. OIG's 2000 physician-practice guidance already gives you the training cadence: at least an annual coding and billing training program for everyone involved in coding and billing.

Weigh what an empty seat costs while you decide. AHIMA's 2023 survey release says health information understaffing has led to reduced reimbursement, increased claims denials, lowered patient data quality and slower information releases, with shortages described as notable in revenue cycle management. A manager seat sitting open compounds all four quietly.

Employer information, not coding, billing-compliance, legal or tax advice. The rules named here belong to the OIG, HHS, CMS, the EEOC, AAPC and AHIMA, and they change. Confirm screening, training, contracting and pay decisions with the agency or body named, and with health-care counsel where the decision is yours.