Medical Device Cyber Security Program Manager
About The Position
Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements. The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.
Requirements
- Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)
- Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)
- Bachelor’s degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field.
- 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role.
- Experience leading enterprise-wide or multi-site programs in complex operational environments.
- Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks.
- Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.
Nice To Haves
- Experience in a large integrated delivery network or multi-hospital health system.
- Familiarity with IoMT security platforms such as Cynerio or Medigate.
- Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs.
- Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM.
Responsibilities
- Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
- Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
- Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
- Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
- Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
- Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.
- Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.
Benefits
- Medical, Dental, Vision plans
- Adoption, Fertility and Surrogacy Reimbursement up to $10,000
- Paid Time Off and Sick Leave
- Paid Parental & Family Caregiver Leave
- Emergency Backup Care
- Long-Term, Short-Term Disability, and Critical Illness plans
- Life Insurance
- 401k/403B with Employer Match
- Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
- Student Debt Pay Down – $10,000
- Pet Insurance
- Legal Resources Plan
- Annual discretionary bonus
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
