How to Hire a Revenue Cycle Manager: Credentials, Sourcing and Screening

You are hiring someone to run the revenue cycle as a measured operation, not a senior biller with a new title. On day one the seat has to supervise the staff who touch claims, read the cycle's cash position, and report both to leadership in numbers.

HFMA gives you the vocabulary the hire should already speak. Its 2023-edition MAP Keys list 29 revenue-cycle KPIs in five groups — Patient Access, Pre-Billing, Claims, Account Resolution and Financial Management — which HFMA says apply to hospitals, ambulatory providers, physician organizations and other provider types.

Get specific in the interview. HFMA defines Clean Claim Rate as claims that pass edits requiring no manual intervention on the first scrub, divided by claims accepted into the claims processing tool for billing. It defines Net Days in A/R as net A/R divided by average daily net patient service revenue, and Cost to Collect as total revenue cycle cost divided by total patient service cash collected.

One caution travels with those definitions: the MAP Keys document we reviewed defines the metrics but publishes no target values, and our research found no HFMA-endorsed number behind any figure a candidate quotes you. Ask how they would set a target from your own data instead.

Management is the other half of the seat. O*NET's task list for medical and health services managers — the occupation group that holds these managers — includes directing, supervising and evaluating staff work, conducting fiscal operations including budgets and rates for services, and establishing work schedules and assignments according to workload. Ask each finalist for a concrete example of all three from their last seat.

On education and experience, BLS says medical and health services managers typically need a bachelor's degree plus work experience in an administrative or clinical role in a health care facility, though some employers hire with an associate's degree and others prefer a master's. BLS's projections table lists a bachelor's degree as typical entry education, with less than 5 years of related work experience for the occupation.

If you need the role itself defined — reporting lines, the span of the cycle, the settings the title appears in — the career guide to what a revenue cycle manager does owns that question. This page stays on the hiring decision.

BLS's typical entry path for medical and health services managers runs through a bachelor's degree and work experience, so treat credentials as the specialty layer you prefer on top of the foundation. The revenue-cycle-specific credentials to name in a posting come from three bodies: HFMA, AAHAM and AAPC.

HFMA describes its Certified Revenue Cycle Representative (CRCR) as a national-level certification on the patient-centric revenue cycle, and says HFMA membership gives access to its certifications, most at no additional cost. HFMA also offers the CHFP: it is earned by completing two modules — Business of Health Care and Operational Excellence — is open only to HFMA members, and must be maintained every three years with 60 hours of education.

AAHAM describes its certification family as a complete career ladder, beginning with the Certified Revenue Cycle Specialist (CRCS) and culminating with the Certified Revenue Cycle Executive (CRCE), with a professional-level exam for supervisors and managers. On a manager's resume, the credentials at the supervisor-and-manager end of that ladder are the ones aimed at your seat.

For physician-practice seats, AAPC describes its CPPM (Certified Physician Practice Manager) as validating management of practice business operations including compliance, revenue cycle, HR, health information and governance. In a practice where the manager also runs HR and health information, the CPPM maps to more of the desk than a coding-only credential would.

A defensible posting line puts experience first and letters second: "CRCR, CRCE, CPPM or equivalent revenue-cycle management experience." Verify whatever a candidate lists, at the issuing body. AAPC's online credential verification tool checks a member's AAPC credentials or status using the member ID and last name (or email and last name), returning the credential, earned date, renewal date and status.

Read AAPC's terms before you build a spreadsheet of results: the tool is for verifying an individual's credentials only, compiling data or other commercial use is prohibited, and AAPC cannot guarantee absolute accuracy, so you confirm the ID or email actually belongs to your candidate. Our research did not confirm a public online lookup for HFMA's CRCR; ask HFMA how to confirm a candidate's credential.

Credential rules belong to the bodies that issue them. Confirm current CRCR, CHFP, CRCS/CRCE and CPPM eligibility, maintenance and renewal details with HFMA, AAHAM and AAPC before you write them into a posting.

You have four realistic sources for this seat: your own staff, your referrals, your posting and the manager benches of other organizations. Manager searches reward patience, because you are hiring judgment built over years, not a certification someone earned last spring.

Start inside. BLS says medical records specialists — the occupation group that holds your coders and records staff — may advance to health information technologist or medical and health services manager roles after completing a higher certification program or earning a degree in health information technology. A strong AR, denials or billing supervisor who finishes that kind of program already knows your payers, your systems and your staff.

Write the posting for the seat you actually have. Cover setting and specialty, the systems you run, payer mix, the team size they would inherit, the credential line, the pay range where your state requires one in postings, and whether the seat is on-site, hybrid or remote. Our guide to where to post billing and coding jobs compares the channels, and it pays to browse the revenue cycle manager jobs candidates already see on this board before you finalize the wording.

Referrals are worth working at this level. Your billing supervisors, AR staff and coders know which vendor analyst and which colleague actually kept a cycle clean, and a referred manager arrives with part of the reference check already done.

Budget time for the search. BLS projects employment of medical and health services managers — the occupation group, which includes managers well beyond revenue cycle — to grow 24.2% from 2025 to 2035, with about 62,300 openings per year on average. That is demand context for the occupation group, not a promise about your market, but it tells you experienced candidates are interviewing you too.

Screen in three passes — a structured interview, a scenario-based work sample and references — and score every candidate on the same sheet. The federal government's own hiring guidance describes the format. OPM describes a structured interview as one in which all candidates get the same predetermined questions in the same order, with all responses rated on the same scale and standards. OPM says that helps candidates be assessed accurately and consistently.

Build the interview around the cycle rather than generic leadership. Four prompts that work at manager level:

• You inherit our revenue cycle on Monday — what do you measure in the first 30 days, and what do you refuse to change until you understand it?
• Denials from one payer doubled last quarter — walk me through your first week of response.
• Which number do you report to ownership every month, and how exactly is it calculated?
• A long-tenured biller's work queue keeps slipping — what do you do?

You are listening for metric literacy, sequencing, escalation judgment and how they develop staff. A manager who cannot define their own headline metric precisely enough that you could recompute it is reporting numbers they do not fully understand.

The work sample settles the experience claim. Hand finalists a sanitized remittance file, a KPI export from your own system or a payer policy excerpt, and ask for a short written read. Two federal requirements shape any test you give. The EEOC says a required test must be necessary and related to the job and may not exclude people based on protected characteristics. The ADA requires reasonable accommodation in test administration for qualified applicants with disabilities absent undue hardship.

References close the loop, and this seat carries authority over compliance decisions. OIG's 1998 compliance guidance for third-party billing companies says that for new employees with discretionary authority over compliance-related decisions, billing companies should conduct a reasonable and prudent background investigation including a reference check, and should require applicants to disclose criminal convictions or exclusion actions. A physician practice is not that guidance's subject, but a revenue cycle manager holds exactly the discretionary authority it describes, so the step travels well.

If the background check runs through a consumer-reporting vendor, the Fair Credit Reporting Act sets the steps. Before you order the report, give the applicant a written, stand-alone notice — it cannot live inside the job application — and get written permission.

Before rejecting anyone based on the report, the FCRA requires a pre-adverse-action notice with a copy of the report and the consumer-rights summary, then a final adverse action notice naming the reporting company and the person's dispute rights. The FTC advises checking your state law first, because some states restrict employment use of these reports, usually credit reports.

The manager owns cash, denials and the compliance numbers reported to leadership, so two rule sets attach at hire: federal exclusion screening and HIPAA workforce training. In a small organization, decide early who owns each, because OIG's guidance below suggests keeping your compliance contact out of billing where possible.

Exclusion first. OIG states that anyone who hires an individual or entity on its List of Excluded Individuals/Entities (LEIE) may be subject to civil monetary penalties, and that health care entities should routinely check the list for new hires and current employees. The federal payment ban applies regardless of who submits the claims and covers all administrative and management services an excluded person furnishes — language that reaches management work, not just billing and coding.

Check before the offer, then keep checking. OIG says entities should check the LEIE before employing or contracting with anyone and periodically afterward, and because OIG updates the list monthly, OIG says screening each month best minimizes potential overpayment and civil monetary penalty liability. OIG publishes the LEIE as an online searchable database, a downloadable CSV and monthly supplement files.

OIG's 2023 General Compliance Program Guidance — voluntary, nonbinding guidance — lists monthly screening of the LEIE and state Medicaid exclusion lists, regular screening of state licensure and certification databases, and an annual review of policies and procedures among its examples of routine compliance monitoring. OIG notes that many state Medicaid programs have their own exclusion authorities and maintain their own state exclusion lists, so run both.

One OIG nuance matters in a small shop. The same guidance recommends that small entities that cannot support a compliance officer designate a compliance contact who, whenever possible, should not be involved in billing, coding or claim submission, and who reports at least quarterly to the owner or CEO. If your revenue cycle manager is also acting as your compliance officer, you are blending two roles OIG suggests separating where the organization can — a staffing question worth taking to your compliance contact or health-care counsel.

HIPAA training runs through the seat as well. The Privacy Rule requires a covered entity to train all members of its workforce on its PHI policies and procedures as necessary and appropriate for their functions, with new workforce members trained within a reasonable period after joining. The rule sets no fixed annual frequency, and the entity must document that training was provided.

The Security Rule adds a security awareness and training program for all workforce members including management, with addressable specifications for security reminders, protection from malicious software, log-in monitoring and password management. The annual rhythm comes from OIG's guidance, which recommends compliance-program training at least annually for board members, officers, employees, contractors and medical staff, guided by an annual training plan.

Put the overpayment clock on the manager's dashboard too. Under the federal rule, a Medicare overpayment must be reported and returned by the later of 60 days after it is identified or the date a cost report is due. The deadline can be suspended for up to 180 days while a timely good-faith investigation of related overpayments is under way. Whoever runs your denials and payment posting needs to know that clock exists.

Our guide to screening hires against the OIG exclusion list walks the mechanics step by step. None of this is a compliance plan and it is not legal advice: exclusion screening and HIPAA obligations run through the OIG and HHS OCR, and the workflow design belongs with your compliance contact or health-care counsel.

Same cycle, three delivery models, and the manager seat changes shape in each. Choose on claim volume, team size and management bandwidth, not on principle.

In-house keeps the seat next to your coders, billers and front desk, which keeps escalations inside the building. Remote widens the candidate pool past your zip code and moves PHI into a home workspace. The Security Rule's physical safeguards — policies on workstation use and physical safeguards for all workstations that access ePHI — reach the home office. Its technical safeguards add unique user identification, automatic logoff and encryption to the access checklist. Settle equipment, workspace and access expectations in the offer letter, not in the first week of training.

Outsourcing replaces the hire with a vendor and a contract, and the contract questions arrive before the first claim moves. Billing and claims processing are among HHS's examples of activities that make a vendor a HIPAA business associate when PHI is involved. The business associate agreement must carry the elements the rule lists: permitted uses and disclosures, safeguards, breach reporting, subcontractor flow-down, and return or destruction of PHI at termination when feasible.

Fee structures deserve their own read before you sign. If a vendor receives and negotiates your Medicare payments in your name, Medicare's billing-agent conditions apply, including that the agent's compensation not be related in any way to the dollar amounts billed or collected and not be dependent on actual collection.

CMS's Claims Processing Manual says those compensation conditions do not apply when the agent merely prepares bills and does not receive and negotiate the provider's checks. OIG also has a longstanding concern that percentage-based billing arrangements may increase the risk of upcoding and similar abusive billing practices. Confirm how any proposed arrangement fits these rules with your MAC and health-care counsel before you sign.

Whichever model you pick, the sequence is the same: contracts and privacy questions in front of health-care counsel before the first claim moves. Our guide to hiring billing and coding staff works through the role mix, the outsourcing decision and the rest of the department around this seat.

Retention for this seat runs on three levers: pay benchmarked honestly, credentials you sponsor, and authority that matches the accountability you hired.

On pay, use the labeled federal numbers as a bracket, not a target. BLS OEWS May 2025 puts medical and health services managers (SOC 11-9111, all industries — the closest available group) at a median of $123,860 a year, with the middle half earning $94,700 to $166,100. BLS does not separate billing or revenue cycle managers within the code, and the group covers all health care managers, hospital executives included — an upper-bound proxy. Price against your market, your payer mix and the team size the seat actually runs.

Credential sponsorship gives the seat a visible next rung. HFMA says membership includes access to all HFMA certifications, most at no additional cost, and AAHAM's ladder runs from the CRCS to the CRCE with a professional-level exam for supervisors and managers. AAPC's CPPM serves the same purpose on the practice-management side.

Give the seat the authority you hired it for. O*NET's task list for the occupation group includes directing and evaluating staff work and setting schedules and assignments by workload, so give the manager that authority over the billing team, not just a work queue. Compliance-program training is different. OIG recommends it at least annually, guided by an annual training plan: the manager can get the billing team through it, but the plan sits with your compliance officer or contact, whom OIG suggests keeping out of billing where possible.

The occupation group your competitors hire from is the one BLS projects to grow 24.2% from 2025 to 2035, with about 62,300 openings per year on average. Track your own vacancies, your own refill times and your own cycle metrics after every departure: your numbers, not a published benchmark, are the retention plan that works.

Employer information, not coding, billing-compliance, legal or tax advice. The rules named here belong to their agencies — the OIG, HHS OCR, the FTC and the EEOC — and they change. Confirm exclusion screening, background checks, applicant testing and HIPAA training with the agency named, and with health-care counsel where contracts are involved.