Medical Device Cyber Security Program Manager

Sentara Health; United States; Hybrid; USD 121,000 - 183,000; Full time

Benefits offered by this job

Market-pay compensation

Comprehensive benefits

401(k) match

Education assistance

Paid time off

Job summary

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This hybrid role requires travel to Sentara's 12 primary local hospitals and close partnership with Cybersecurity, IT, Clinical Engineering/HTM, and vendors to strengthen governance and risk-based execution.

You will drive vulnerability management, governance forums, KPIs, and executive reporting, ensuring compliance with

Qualifications

• Minimum of 5+ years in cybersecurity program management with healthcare/enterprise scope.
• Strong knowledge of medical device ecosystems, clinical workflows, and risk frameworks.
• Familiarity with HIPAA Security Rule and FDA medical device cybersecurity guidance.

Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment with cybersecurity, healthcare regulatory, audit, and accreditation expectations.
• Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.

Skills

Cybersecurity program management

Cross-functional leadership

Vulnerability management

Executive reporting

Vendor management

Risk-based execution

Education

Bachelor’s degree in Cybersecurity, IT, Healthcare Administration, or related field

PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)

Tools

Cynerio

Medigate

CMMS/CMDB integration

Job description

City/State Virginia Beach, VA

Work Shift First (Days)

Overview

Sentara is hiring a Medical Device Cyber Security Program Manager! This position has a hybrid work schedule. Must be willing to travel to any of the 12 primary local hospitals. Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements. The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.

Key Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.
• Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.

Education

Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)

Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)

Certification/Licensure Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)

Experience Required Bachelor’s degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field. 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role. Experience leading enterprise-wide or multi-site programs in complex operational environments. Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks. Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.

Preferred Experience in a large integrated delivery network or multi-hospital health system. Familiarity with IoMT security platforms such as Cynerio or Medigate. Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs. Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM.

Work Environment

Primarily onsite role supporting multiple Sentara Health facilities. Enterprise-level coordination across hospitals, ambulatory sites, imaging centers, and related clinical locations. Occasional after-hours engagement may be required for critical issues or major changes.

Why Join Sentara?

This is an opportunity to lead a high-impact cybersecurity program that directly supports patient safety, clinical operations, and enterprise risk reduction across a complex healthcare environment.

Talroo-IT , PMP, PgMP, CISSP, HCISPP, or CISM, IoMT, Cynerio, Medigate, cybersecurity, program management, enterprise medical device, healthcare IT, clinical engineering

Compensation

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $120,744.00 - $183,164.80 annually. Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.

Benefits

Sentara offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance; 401(k)/403(b) with employer match; paid time off (vacation, sick time, and holidays); paid parental and military leave; educational assistance or student loan repayment; and voluntary benefits.

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met

Equal Opportunity & Diversity Statement

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco-free environment.

Remote Work Availability

For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

About Sentara Health

Sentara Health is a Virginia and Northeastern North Carolina based not‑for‑profit integrated healthcare provider that has been in business for over 131 years. Offering hundreds of sites of care including 12 hospitals, PACE, home health, hospice, medical groups, imaging services, therapy, outpatient surgery centers, and an 858,000 member health plan. The people of the communities that we serve have nominated Sentara “Employer of Choice” for over ten years. U.S. News and World Report has recognized Sentara as having the Best Hospitals for 15+ years. Sentara offers professional development and a continued employment philosophy!