Medical Device Cyber Security Program Manager
About The Position
Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements. The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.
Requirements
- Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)
- Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)
- Bachelor’s degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field.
- 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role.
- Experience leading enterprise-wide or multi-site programs in complex operational environments.
- Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks.
- Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.
Nice To Haves
- Experience in a large integrated delivery network or multi-hospital health system.
- Familiarity with IoMT security platforms such as Cynerio or Medigate.
- Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs.
- Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM.
Responsibilities
- Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
- Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
- Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
- Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
- Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
- Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.
- Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.
Benefits
- Medical, Dental, Vision plans
- Adoption, Fertility and Surrogacy Reimbursement up to $10,000
- Paid Time Off and Sick Leave
- Paid Parental & Family Caregiver Leave
- Emergency Backup Care
- Long-Term, Short-Term Disability, and Critical Illness plans
- Life Insurance
- 401k/403B with Employer Match
- Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
- Student Debt Pay Down – $10,000
- Pet Insurance
- Legal Resources Plan
- Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
