Medical Device Cyber Security Program Manager

Sentara Health; Virginia Beach (VA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work schedule

Travel to 12 hospitals

Job summary

Sentara Health in Virginia Beach, VA, offers a hybrid role as a Medical Device Cyber Security Program Manager. The position leads an enterprise medical device security program across a multi-hospital environment, collaborating with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors to strengthen governance and risk-based execution.

The role emphasizes coordinating cross-functional workstreams, vulnerability management, audit readiness, and standardized processes across

Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment

Job description

City/State

Virginia Beach, VA

Work Shift

First (Days)

Overview:

Sentara is hiring a Medical Device Cyber Security Program Manager!

This position has a hybrid work schedule.

Must be willing to travel to any of the 12 primary local hospitals.

Overview

Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements.

The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.

Key Responsibilities

• Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
• Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
• Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
• Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
• Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
• Ensure program alignment