Medical Device Cyber Security Program Manager

sentara; Virginia Beach (VA); Hybrid; USD 121,000 - 183,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401k/403b with Employer Match

Paid Time Off

Job summary

Sentara is seeking a Medical Device Cyber Security Program Manager to lead the enterprise medical device security program across a multi-hospital environment. This role is hybrid and requires travel to Sentara facilities.

You will drive governance, risk-based execution, vulnerability management, and cross-functional alignment with Cybersecurity, IT, Clinical Engineering/HTM, and vendors to ensure devices remain secure and compliant.

Qualifications

• 5+ years in cybersecurity program management or related leadership role.
• Bachelor's degree in Cybersecurity, IT, Healthcare Admin, or related field.
• Experience leading enterprise-wide programs in multi-hospital environments.

Responsibilities

• Lead enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management and remediation tracking.
• Support governance forums, KPIs, and leadership briefings.
• Ensure compliance with HIPAA, FDA guidance, and accreditation expectations.
• Standardize device onboarding and incident response processes.

Skills

IT program management

Cybersecurity

Healthcare IT

Risk management

Vendor coordination

HIPAA knowledge

Education

Bachelor's degree in Cybersecurity or related field

Tools

CMMS/CMDB

Cynerio

Medigate

Job description

City/State

Virginia Beach, VA

Work Shift

First (Days)

Overview

Sentara is hiring a Medical Device Cyber Security Program Manager! This position has a hybrid work schedule. Must be willing to travel to any of the 12 primary local hospitals.

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements. The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.

Key Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.
• Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.

Education

• Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)
• Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)

Certification/Licensure

Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)

Experience

Required

• Bachelor's degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field.
• 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role.
• Experience leading enterprise-wide or multi-site programs in complex operational environments.
• Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks.
• Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.

Preferred

• Experience in a large integrated delivery network or multi-hospital health system.
• Familiarity with IoMT security platforms such as Cynerio or Medigate.
• Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs.
• Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM.

Work Environment

Primarily onsite role supporting multiple Sentara Health facilities.

Enterprise-level coordination across hospitals, ambulatory sites, imaging centers, and related clinical locations.

Occasional after-hours engagement may be required for critical issues or major changes.

Why Join Sentara?

This is an opportunity to lead a high-impact cybersecurity program that directly supports patient safety, clinical operations, and enterprise risk reduction across a complex healthcare environment.

Talroo-IT , PMP, PgMP, CISSP, HCISPP, or CISM, IoMT, Cynerio, Medigate, cybersecurity, program management, enterprise medical device, healthcare IT, clinical engineering

We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $120,744.00 - $183,164.80 annually.

Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down - $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is