Medical Device Cyber Security Program Manager
Sentara Health
Summary
Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements.
Job description
The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities.
Key Responsibilities
- Lead execution and continuous improvement of the enterprise medical device cybersecurity program.
- Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors.
- Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting.
- Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture.
- Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps.
- Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations.
- Standardize processes for device onboarding, decommissioning, change management, and medical device incident response.
Work Environment
- Primarily onsite role supporting multiple Sentara Health facilities.
- Enterprise-level coordination across hospitals, ambulatory sites, imaging centers, and related clinical locations.
- Occasional after-hours engagement may be required for critical issues or major changes.
Requirements
- Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required)
- Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required)
- Bachelor's degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field.
- 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role.
- Experience leading enterprise-wide or multi-site programs in complex operational environments.
- Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks.
- Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations.
- Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM (Preferred)
- Experience in a large integrated delivery network or multi-hospital health system.
- Familiarity with IoMT security platforms such as Cynerio or Medigate.
- Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs.
Benefits
- Medical, Dental & Vision
- Adoption, Fertility & Surrogacy Reimbursement
- Paid Time Off
- Sick Leave
- Paid Parental & Family Caregiver Leave
- Emergency Backup Care
- Long-Term Disability
- Short-Term Disability
- Critical Illness plans
- Life Insurance
- 401k/403B with Employer Match
- Tuition Assistance
- Student Debt Pay Down
- Pet Insurance
- Legal Resources Plan
Company overview
Sentara Health is a leading not-for-profit integrated healthcare delivery system serving Virginia, northeastern North Carolina, and Florida. Founded in 1888 and headquartered in Hampton Roads, Virginia, Sentara operates 12 acute care hospitals across its service area, with 10 hospitals holding prestigious Magnet® recognition for nursing excellence. The organization employs approximately 34,000 healthcare professionals and serves over 1 million health plan members through its Sentara Health Plans division. As one of the top 20 largest not-for-profit integrated health systems in the United States, Sentara is nationally recognized for clinical quality, safety, and innovation. The system has received numerous accolades including Health Quality Innovator of the Year (2024), Forbes' "America's Best-In-State Employer" (2024), and inclusion in IBM Watson Health's "Top 15 Health Systems." Sentara's comprehensive services span hospital care, outpatient facilities, home health, hospice services, and specialized programs like the Nightingale air ambulance service, which has completed over 20,000 missions since 1982.