About this role

Audit WordPress setup, hosting, plugins, forms, integrations, tracking tools, and user access.
Identify HIPAA, privacy, and security gaps related to PHI handling, encryption, access control, backups, logging, and third-party vendors.
Assess risks involving CRMs, analytics tools, email platforms, payment tools, APIs, and form builders.
Review overall website security posture and identify vulnerabilities or misconfigurations.
Provide a concise audit report with findings, risk levels, and prioritized remediation steps.

4-5 years of experience in WordPress security and technical audit
Hands-on HIPAA compliance experience for healthcare or regulated websites
Knowledge of website privacy, consent management, data retention, and third-party risk
Familiarity with OWASP, SSL/TLS, firewalls, malware scanning, backups, and least-privilege access
Clear communication and documentation skills.

Freelance WordPress, Security, HIPAA Compliance Consultant

Key skills