Medical Device Cyber Security Program Manager

Sentara; Virginia Beach (VA); Hybrid; USD 121,000 - 183,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

Adoption, Fertility and Surrogacy Reim

Paid Time Off

Paid Parental & Family Caregiver Leave

Emergency Backup Care

Long-Term Disability

Short-Term Disability

Life Insurance

401k/403B with Employer Match

Tuition Assistance

Student Debt Pay Down

Pet Insurance

Legal Resources Plan

Job summary

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. Hybrid work schedule with travel to Sentara’s 12 primary hospitals is required to strengthen governance and risk-based execution.

You will partner with Cybersecurity, IT, Clinical Engineering/HTM, and vendors to standardize processes, improve vulnerability management, and ensure audit readiness in alignment with HIPAA and

Qualifications

• Bachelor's degree in Cybersecurity, IT, Healthcare Administration, or a related field.
• 5+ years of experience in cybersecurity program management in healthcare IT or clinical environments.
• Experience leading enterprise-wide programs across multi-site hospital environments.
• Strong knowledge of medical device ecosystems, vulnerability management, and risk frameworks.
• Working knowledge of HIPAA Security Rule, FDA guidance, and healthcare audits or accreditation.

Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, operations, and vendors.
• Oversee risk-based vulnerability management including prioritization and remediation tracking.
• Support governance forums, KPIs, and leadership briefings on risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, and incident response.
• Standardize processes for device onboarding, decommissioning, change management, and incident response.

Skills

Cybersecurity PM

HIPAA Security Rule

FDA guidance

Vulnerability management

Risk management

Healthcare IT

Cross-functional leadership

Multi-site programs

Education

Bachelor's degree in Cybersecurity/IT/Healthcare Administration

Tools

Cynerio

Medigate

CMMS/CMDB

Job description

City/StateVirginia Beach, VAWork ShiftFirst (Days)Overview:Sentara is hiring a Medical Device Cyber Security Program Manager!This position has a hybrid work schedule.Must be willing to travel to any of the 12 primary local hospitals.OverviewSentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements.The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.Key ResponsibilitiesLead execution and continuous improvement of the enterprise medical device cybersecurity program.Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.EducationMinimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)Certification/LicensureCertifications such as PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)ExperienceRequiredBachelor’s degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field.5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role.Experience leading enterprise-wide or multi-site programs in complex operational environments.Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks.Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.PreferredExperience in a large integrated delivery network or multi-hospital health system.Familiarity with IoMT security platforms such as Cynerio or Medigate.Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs.Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM.Work EnvironmentPrimarily onsite role supporting multiple Sentara Health facilities.Enterprise-level coordination across hospitals, ambulatory sites, imaging centers, and related clinical locations.Occasional after-hours engagement may be required for critical issues or major changes.Why Join Sentara?This is an opportunity to lead a high-impact cybersecurity program that directly supports patient safety, clinical operations, and enterprise risk reduction across a complex healthcare environment.Talroo-IT ,PMP, PgMP, CISSP, HCISPP, or CISM, IoMT, Cynerio, Medigate, cybersecurity, program management, enterprise medical device, healthcare IT, clinical engineeringWe provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $120,744.00 - $183,164.80 annually. Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.Benefits: Caring For Your Family and Your Career• Medical, Dental, Vision plans• Adoption, Fertility and Surrogacy Reimbursement up to $10,000• Paid Time Off and Sick Leave• Paid Parental & Family Caregiver Leave• Emergency Backup Care• Long-Term, Short-Term Disability, and Critical Illness plans• Life Insurance• 401k/403B with Employer Match• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education• Student Debt Pay Down – $10,000•Pet Insurance•Legal Resources Plan•Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.In support of our mission “to improve health every day,” this is a tobacco-free environment.For positions that are available as remote work, Sentara Health employs associates in the following states:Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.