The HIPAA Security Officer is often a person in the IT department or one with a professional background in that area.