How to Hire a Surgery Coder: Credentials, Sourcing and Screening

Start from the work, not the title. BLS describes medical coders as assigning the diagnosis and procedure codes for patient care, population health statistics and billing, and acting as the liaison between health care providers and billing offices. O*NET's task list adds identifying, compiling, abstracting and coding patient data using standard classification systems. On a surgical queue, that work runs through operative reports: the coder reads what the surgeon documented and turns procedures, diagnoses and supplies into the codes your billing team submits.

Day-one competence in surgical coding shows up in specifics. Probe all three in the interview:

• Procedure work from operative notes — CPT assignment backed by ICD-10-CM diagnosis linking, the code sets AAPC says the CPC covers across outpatient and physician services.
• Medicare's global surgery indicators — CMS's global surgery booklet defines 000 for a 0-day post-operative period (endoscopies and some minor procedures), 010 for a 10-day period on other minor procedures, and 090 for major surgeries at 90 days. YYY codes are contractor-priced at a MAC-set 0, 10 or 90 days.
• Bundling checks — CMS publishes Medicare NCCI procedure-to-procedure edits and medically unlikely edits, and updates them quarterly, so a claim that was clean last quarter can need a second look this one.

Decide which seat you are hiring before you write the posting. Pro-fee surgical coding reports the surgeon's professional work; facility outpatient coding reports the hospital or ASC side of the same case. AAPC draws its credential line along that split — the COC validates coding for outpatient hospital and facility services including same-day surgeries, emergency department visits and hospital outpatient clinic services — and the next section maps credentials to seats. Name your setting and specialty mix (general surgery, orthopedics, ENT, ophthalmology, or the full ASC schedule) so candidates can tell which one you mean.

Code currency is part of the job, not a bonus. ICD-10-CM diagnosis codes and ICD-10-PCS procedure codes update every October 1 — CMS has posted FY2027 files for discharges and encounters from October 1, 2026 through September 30, 2027 — and the NCCI edits update quarterly. Ask candidates how they handled the most recent code load; the working habits the answer reveals matter more than the certificate on the résumé.

The candidate-side view of this role — training routes, settings and career path — belongs to our career guide on what a surgery coder does.

Treat the credential as a hiring decision you get to design. BLS says medical records specialists typically need a postsecondary certificate to enter the occupation, though some qualify with a high school diploma, and that certification may be required or preferred. BLS also notes that employers may prefer to hire applicants who have certification, or expect applicants to earn it shortly after being hired. Whatever you decide, state it plainly in the posting.

For a pro-fee surgical seat, AAPC's CPC is the baseline. AAPC describes the CPC as validating comprehensive coding knowledge across outpatient and physician services, including ICD-10-CM, CPT and HCPCS Level II, compliance, payer rules and reimbursement — the mix a surgeon's claim touches.

For a facility seat — hospital outpatient or ASC — AAPC's COC is the closer fit. AAPC describes the COC as validating coding for outpatient hospital and facility services, including same-day surgeries, emergency department visits and hospital outpatient clinic services.

AHIMA covers the physician side with the CCS-P, its physician-based exam covering ICD-10-CM and CPT/HCPCS content; AHIMA's CCS and CCS-P exams delivered on or after May 1, 2026 require the 2026 code books. AHIMA describes the CCS as demonstrating tested skills in data quality and accuracy and mastery of coding proficiency, with holders required to complete CEUs and pay a recertification fee over each two-year certification period.

Verify before you post: credential scopes and exam rules change — confirm current CPC and COC details with AAPC and current CCS-P details with AHIMA, and ask both bodies directly about any specialty credentials they list for surgical coding beyond the credentials this page describes.

Leave room for apprentice hires if your queue can carry one. AAPC says a candidate who passes the CPC exam without two years of coding experience carries apprentice status (CPC-A), which tells employers the person passed the exam but is still gaining on-the-job experience. The junior-hire tradeoffs and the apprentice-removal paperwork follow the credential, not the seat — our guide to how to hire a medical coder works through them in detail.

Verify every credential at the issuing body before the offer, never from a certificate image. AAPC's online verification tool lets employers check a member's credentials or status using the member ID and last name (or email and last name). It returns the credential, earned date, renewal date and status. AHIMA verifies with the person's last name plus the credential number or AHIMA ID. The step-by-step is in our guide to verifying credentials before you hire.

Start with who already employs this occupation. Per BLS, medical records specialists held about 200,700 jobs in 2025, and the largest employers were hospitals (28%) and offices of physicians (18%), followed by professional, scientific and technical services (10%), administrative and support services (8%) and management of companies (7%). For a surgical employer, hospitals and physician offices are the two largest employers of this occupation — where the coding experience you need already sits.

The pool moves constantly. BLS projects employment of medical records specialists to grow 7.8% from 200,700 in 2025 to 216,300 in 2035, with about 14,000 openings per year on average. Recruiting for a specialty seat is a standing process, not a one-off project.

Source where surgical coders already work: hospital HIM and outpatient coding departments, ASCs, surgical specialty groups, and the coding vendors that serve them. The credential bodies can also be part of the search. AAPC says its members have access to nearly 400 local chapters that collectively host over 3,000 events per year, with finding or sharing job opportunities listed among the chapter benefits. AHIMA is a federation of state-level Component Associations. When you are ready to post, our guide to where to post billing and coding jobs compares the boards and communities.

Then read the market from the candidate's side. The surgery coder jobs posted on this board show how competing employers describe setting, specialty mix, credential expectations and remote terms — a free benchmark for your own posting.

Screen in three passes: credential, work sample, then interview judgment. The credential pass is the verification step from the previous section. What separates surgical coding candidates is the work sample — build it from your own case mix instead of generic coding trivia.

A surgical work sample can hold one operative note to abstract, a scenario with a global-period question, and a claim with a bundling question — the same three failure points that surface later in denials and audits. Give every finalist the same exercise, scored on the same rubric, and keep every element tied to the actual work. The EEOC says a test you require applicants to take must be necessary and related to the job, and may not exclude people based on protected characteristics.

For the interview, OPM describes a structured interview as one in which all candidates get the same predetermined questions in the same order and all responses are rated on the same scale and standards, which it says helps candidates be assessed accurately and consistently. Surgical scenario questions earn their keep here. Ask how the candidate resolves an operative report with conflicting, missing or unclear information — O*NET's tasks include resolving or clarifying codes or diagnoses by consulting doctors, so listen for a query, not a guess. Ask how they check payer policy before settling a global-period question.

Our guide to testing coders before you hire covers exercise design end to end. One more lever is the posting itself: name the setting, specialty mix, systems and credential expectation so surgical candidates can self-select before they apply.

The hire brings compliance work with it: exclusion screening before the start date, and audits and training after it. Start with the OIG's List of Excluded Individuals/Entities (LEIE). OIG says entities should check the LEIE before employing or contracting with individuals and periodically afterward — and because OIG updates the LEIE monthly, OIG says screening each month best minimizes potential overpayment and civil monetary penalty liability. OIG's General Compliance Program Guidance lists monthly screening of the LEIE and state Medicaid exclusion lists, plus regular screening of state licensure and certification databases, among its examples of routine compliance monitoring.

The exposure is concrete. OIG states that anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties, and that health care entities should routinely check the list for new hires and current employees. OIG's exclusions FAQ adds that the payment ban applies regardless of who submits the claims and covers all administrative and management services the excluded person furnishes — language that reaches coding and billing work.

The specialty-specific risk sits in the coding itself. Global periods, modifiers and bundling edits are the trip points on surgical claims, and OIG's 1998 billing-company guidance lists unbundling, upcoding, duplicate billing and failure to properly use modifiers among the billing risk areas written policies should address. A surgery coder working a 90-day global period or an NCCI edit pair is working the exact terrain those risk areas describe — one more reason the screening section above tests for them before the hire, not after.

Audits and training round out the guidance. OIG's 2000 compliance guidance for individual and small group physician practices recommends a baseline audit and then periodic audits at least once a year, suggesting as a basic guide five or more medical records per federal payor or five to ten records per physician. The same guidance recommends at least an annual coding and billing training program for everyone involved in coding and billing, and says new coding and billing staff should be trained as soon as possible and work under an experienced employee until training is complete.

HIPAA training is the other duty that comes with the seat. The Privacy Rule requires a covered entity to train all members of its workforce on its PHI policies and procedures as necessary and appropriate for their functions. New workforce members must be trained within a reasonable period after joining; the rule sets no fixed annual frequency, and the training must be documented. The Security Rule adds a security awareness and training program for all workforce members including management.

These rules belong to the OIG and HHS, and they change. Confirm your screening, audit and training setup with your compliance advisor or health-care counsel before you rely on it.

All three models can work; they fail differently. In-house gives you the tightest oversight of a specialty queue, remote widens the pool past your commute radius, and outsourcing moves the hiring problem to a vendor while adding a vendor-oversight problem of its own.

If the seat is remote, the safeguards travel with the work. The HIPAA Security Rule's workstation-use and physical-safeguard policies cover all workstations that access ePHI — home workstations included. Settle equipment, workspace and access policy before the first remote start date, and hold remote surgical coders to the same work sample and screening standards as on-site hires.

If you outsource instead, the vendor becomes part of your compliance paperwork. HHS lists billing and claims processing among the activities that make a vendor a HIPAA business associate when PHI is involved, and BAAs must contain the elements in 45 CFR 164.504(e). A business associate must also have a BAA with any subcontractor that creates, receives, maintains or transmits PHI before disclosing PHI to it — and since the HITECH Act and HHS's 2013 Omnibus final rule, business associates have been directly liable for certain HIPAA violations.

Whichever model you choose, the credential verification and exclusion screening steps above do not change — only who performs them does. If the decision spans your whole billing operation rather than one surgical seat, the hub guide to hiring billing and coding staff works the in-house, remote and outsourced question across every role.

Retention starts in week one. OIG's physician-practice guidance says new coding and billing staff should be trained as soon as possible and work under an experienced employee until training is complete. Pair the new surgery coder with your strongest surgical coder until your own sign-off, not an arbitrary calendar date.

Budget for the renewal cycles the credentials carry. AHIMA requires CCS holders to complete CEUs and pay a recertification fee over each two-year certification period, and AAPC requires CPC holders to keep an annual membership and earn 36 CEUs every two years. Covering those costs is a small line item against re-opening a specialty search.

Publish the ladder, too. BLS says medical records specialists may advance to health information technologist or medical and health services manager roles after completing a higher certification program or earning a degree in health information technology. A surgical coder who can see the next seat at your organization — auditor, CDI, coding lead — has one more reason to build tenure with you.

And weigh what an empty seat does while you search. AHIMA's 2023 survey release says health information understaffing has led to reduced reimbursement, increased claims denials, lowered patient data quality and slower information releases, with shortages described as notable in revenue cycle management. A surgical queue feels an empty chair quickly: the operative notes keep arriving.

Employer information, not coding, billing-compliance, legal or tax advice. The rules named here belong to the OIG, HHS, CMS, the EEOC, AAPC and AHIMA, and they change. Confirm screening, training and employment decisions with the agency or body named, and with health-care counsel where the call is yours.