Enterprise Medical Device Cybersecurity Lead

Sentara Health; Virginia Beach (VA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work schedule

Travel to 12 hospitals

Job summary

Sentara Health in Virginia Beach, VA, offers a hybrid role as a Medical Device Cyber Security Program Manager. The position leads an enterprise medical device security program across a multi-hospital environment, collaborating with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors to strengthen governance and risk-based execution.

The role emphasizes coordinating cross-functional workstreams, vulnerability management, audit readiness, and standardized processes across

Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment

Job description

Sentara Health in Virginia Beach, VA, offers a hybrid role as a Medical Device Cyber Security Program Manager. The position leads an enterprise medical device security program across a multi-hospital environment, collaborating with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors to strengthen governance and risk-based execution.

The role emphasizes coordinating cross-functional workstreams, vulnerability management, audit readiness, and standardized processes across