The 340B Auditor Shortage: Why Audit and Compliance Roles Are the Hardest 340B Jobs to Fill

When I put together my October list of 77 open 340B roles, one pattern was impossible to miss. Ten of those postings carry "auditor" or "compliance" in the title, spread across eight employers, and one of them, Mercy Health's 340B Auditor role, was posted on August 4, again on August 11, and again on September 9. A role that comes back three times in five weeks is not a role with a deep candidate pool.

I have spent a lot of this year talking to pharmacy directors who cannot find a 340B auditor, and to 340B professionals who are not sure the jump into audit work is worth it. This post is for both of them: who is hiring, what these jobs actually involve, why the pool is so thin, and what to do about it on either side of the table.

Who is hiring 340B auditors right now

These are the audit- and compliance-titled 340B roles from the October list, from community hospitals to academic systems, plus one PBM. Links go to the public postings, and some close quickly.

Trinity Health, WVU Medicine and UNC Health are each running an audit search alongside other 340B analyst openings, which tells you these are not replacements for someone who left. They are new seats being added to programs that have outgrown a single analyst.

What a 340B auditor is really protecting

A 340B program lives or dies on three things: every discounted drug reaches an eligible patient at an eligible site, Medicaid claims never trigger a duplicate discount, and the entity's records in HRSA's OPAIS database match what is actually happening. A 340B auditor is the person whose whole job is to prove those three things are true before someone from the outside checks.

And people from the outside do check. HRSA publishes its covered entity audit results every fiscal year. According to Bluesight's breakdown of the FY2025 results, HRSA audited 115 covered entities, and 49% of them received adverse findings. That is better than FY2024, when 64% did, but look at what was found among the 56 entities with findings:

• 75% had incorrect OPAIS records. Sites, contract pharmacies or Medicaid billing information that did not match reality.
• 50% had duplicate discount or Medicaid Exclusion File findings. Although Bluesight notes that five of the 28 entities flagged for the Medicaid Exclusion File turned out to have no actual duplicate discounts.
• 25% had diversion. 340B drugs reaching patients who did not qualify, including through contract pharmacies.
• 2% had a GPO prohibition violation.

The consequences are not abstract. In the same analysis, 64% of entities with adverse findings faced at least one sanction, half were required to repay manufacturers, and 21% had sites terminated from the program. And HRSA is not the only one looking: law firm McDermott Will & Schulte describes a surge in manufacturer good-faith inquiries and audits of covered entities, so an entity's records now get checked from more than one direction.

Notice that the single biggest finding, bad database records, is boring. It is not fraud. It is a site that was added without updating OPAIS, a contract pharmacy that was terminated but never removed, a Medicaid billing number that changed. That is exactly the kind of thing an internal auditor catches on a monthly sample and an overworked program manager does not.

What these roles actually involve

Titles vary, from "340B Auditor" to "Audit & Compliance Analyst" to "Compliance Auditor," but when I walk through these jobs with hiring managers, the work breaks down into the same pieces:

• Self-audits on a schedule. Pulling samples of 340B claims every month or quarter, tracing each one back to an eligible patient encounter, an eligible provider and an eligible site, and documenting the result.
• HRSA audit readiness. Keeping policies and procedures current, maintaining the annual independent audit of contract pharmacies, and being able to produce an auditable trail on demand.
• Corrective action plans. When something is found, internally or by HRSA, writing the plan, fixing the root cause, and proving it stays fixed.
• Split-billing software and accumulators. Understanding how the software qualifies a claim, how a mapping or crosswalk error leaks ineligible claims into the 340B bucket, and how to untangle it when it does.
• Contract pharmacy and TPA reconciliation. Matching what the third-party administrator says was replenished against what was actually dispensed and billed.
• OPAIS and Medicaid Exclusion File upkeep. The unglamorous records work behind that 75% finding.
• GPO prohibition monitoring for disproportionate share hospitals and the other entity types it applies to.

None of this is learned in a classroom. It is learned by sitting inside a covered entity, running the sample, finding the leak and fixing it. That is the root of the shortage.

Why the pool is so thin

Three things are happening at once.

1. Experience only comes from doing the job. Everyone with "340B" on their resume knows what the program is. A much smaller group has run a self-audit, sat through a HRSA audit, or traced a split-billing mapping problem to its source. Employers are screening for that smaller group, and it does not grow quickly.

2. The people who have done it already have jobs, and vendors are calling them. Prime Therapeutics' 340B Onsite Pharmacy Auditor role is remote. So are most of the vendor and PBM roles in the October list, and the client-facing ones reach $130K. A hospital auditor with three years of clean audits is exactly who those companies want.

3. Certification has become a gate. Several of these postings require or strongly prefer the Apexus 340B ACE credential, which narrows the pool further. More on that below.

Put those together and you get Mercy Health reposting the same auditor role three times. Nothing is wrong with the job. There are simply more open audit seats than there are people who have done the work.

The certification question

The credential employers name most often is the Apexus 340B ACE, short for Advanced Certified Expert. It comes from the Apexus Advanced 340B Operations Certificate Program. Candidates prepare through 340B University, pass an entrance exam with a 70% minimum score, work through a self-paced curriculum, and pass a final exam. ACEs then recertify every two years on current 340B trends and hot topics.

In the October postings, UNC Health's certified compliance analyst role requires ACE. NYU Langone wants it within six months of hire. SSM Health and WVU Medicine ask for the Advanced 340B Operations Certificate, and the University of Miami's director role lists 340B certification too. If you are a 340B professional who wants audit work, this is the credential to get. If you are an employer, consider whether you can hire for experience and fund the certification, because "ACE required" cuts an already small pool in half.

How to hire a 340B auditor

• Write the posting around the audit, not the pharmacy. Say what the program looks like: number of child sites, contract pharmacies, split-billing vendor, TPA, whether the entity has been through a HRSA audit. Experienced auditors self-select on those details.
• Decide on remote before you post. UNC Health, SSM Health, WVU Medicine, Essentia Health and Boston Medical Center all list remote or hybrid 340B roles. If your auditor has to be on site every day, your pool is the people within commuting distance who have done this work, which may be nobody.
• Price against vendors, not the hospital across town. The two compliance-analyst postings on the October list that show pay, Adventist Health and UNC Health, run from about $59K to $87K. Vendor-side 340B roles in the same report reach $130K. A candidate with real audit experience knows both numbers.
• Build a grow-your-own track. A strong pharmacy buyer or technician who already handles replenishment and knows the split-billing system can become an auditor in a year with structured exposure to self-audits and a funded ACE. Hire for the part that is hardest to teach and train the rest.
• Move in days, not weeks. A qualified auditor is usually talking to two or three of the employers above at the same time. A two-step interview inside one week wins candidates that a five-step process loses.

How to become one

• Volunteer for the self-audit. If you are a 340B analyst or coordinator, ask to own the monthly sample. It is the single most valuable line you can add to your resume.
• Learn the software deeply. Know how your split-billing platform qualifies a claim, where accumulators can go wrong, and how to read a TPA reconciliation report. Auditors who can explain a mapping error get hired.
• Get the ACE. It is required or preferred in enough postings now that not having it will cost you interviews.
• Write your resume in outcomes. Audits completed, findings identified and closed, corrective action plans written, HRSA audits passed. "Supported the 340B program" tells a hiring manager nothing.

Audit and compliance is where the 340B market is tightest right now, and I do not see that changing while HRSA keeps publishing findings for half the entities it audits. If you are trying to fill one of these seats, or you are the person who could fill it, message me. 340B recruiting is what I do, and auditors are the conversation I am having most this fall.

Sources and method

Job postings are from the public listings gathered for Who's Hiring in 340B Right Now during the week of October 13, 2026; check each link before applying, as postings close. Audit statistics are HRSA's FY2025 covered entity audit results as summarized by Bluesight. Certification details are from Apexus's program pages.