Hybrid Medical Device Cybersecurity Program Lead

Sentara Health; United States; Hybrid; USD 121,000 - 183,000; Full time

Benefits offered by this job

Market-pay compensation

Comprehensive benefits

401(k) match

Education assistance

Paid time off

Job summary

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This hybrid role requires travel to Sentara's 12 primary local hospitals and close partnership with Cybersecurity, IT, Clinical Engineering/HTM, and vendors to strengthen governance and risk-based execution.

You will drive vulnerability management, governance forums, KPIs, and executive reporting, ensuring compliance with

Qualifications

• Minimum of 5+ years in cybersecurity program management with healthcare/enterprise scope.
• Strong knowledge of medical device ecosystems, clinical workflows, and risk frameworks.
• Familiarity with HIPAA Security Rule and FDA medical device cybersecurity guidance.

Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment with cybersecurity, healthcare regulatory, audit, and accreditation expectations.
• Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.

Skills

Cybersecurity program management

Cross-functional leadership

Vulnerability management

Executive reporting

Vendor management

Risk-based execution

Education

Bachelor’s degree in Cybersecurity, IT, Healthcare Administration, or related field

PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)

Tools

Cynerio

Medigate

CMMS/CMDB integration

Job description

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This hybrid role requires travel to Sentara's 12 primary local hospitals and close partnership with Cybersecurity, IT, Clinical Engineering/HTM, and vendors to strengthen governance and risk-based execution.

You will drive vulnerability management, governance forums, KPIs, and executive reporting, ensuring compliance with