Medical Device Cyber Security Program Manager

City/State Virginia Beach, VA Work Shift First (Days) Overview: Sentara is hiring a Medical Device Cyber Security Program Manager! This position has a hybrid work schedule. Must be willing to travel to any of the 12 primary local hospitals. Overview Sentara Health is seeking a Medical Device Cyber Security Program Manager to lead and mature the enterprise medical device security program across a multi-hospital environment. This role will drive operational rigor, cross-functional alignment, and risk-based execution to help ensure medical devices remain secure, compliant, and aligned with clinical safety and enterprise cybersecurity requirements. The Program Manager will partner closely with Cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and third-party vendors to strengthen governance, improve vulnerability management, support audit readiness, and standardize processes across Sentara facilities. Key Responsibilities Lead execution and continuous improvement of the enterprise medical device cybersecurity program. Coordinate cross-functional workstreams across cybersecurity, IT, Clinical Engineering/HTM, clinical operations, and vendors. Oversee risk-based vulnerability management, including prioritization, remediation tracking, compensating controls, and executive reporting. Support governance forums, operating cadence, KPIs, and leadership briefings to monitor program performance and risk posture. Manage vendor accountability for asset data quality, patching, firmware updates, incident response, and resolution of cross-vendor gaps. Ensure program alignment with relevant cybersecurity, healthcare regulatory, audit, and accreditation expectations. Standardize processes for device onboarding, decommissioning, change management, and medical device incident response. Education Minimum of 3 years of relevant experience in IT program/project management with a bachelor's degree (Required) Minimum of 5 years of relevant experience in IT program/project management without a bachelor's degree (Required) Certification/Licensure Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM (Preferred) Experience Required Bachelor’s degree in Cybersecurity, Information Technology, Healthcare Administration, or a related field. 5+ years of experience in cybersecurity program management, healthcare IT, clinical engineering, or a related leadership role. Experience leading enterprise-wide or multi-site programs in complex operational environments. Strong knowledge of medical device ecosystems, clinical workflows, vulnerability management, and risk frameworks. Working knowledge of HIPAA Security Rule, FDA medical device cybersecurity guidance, and healthcare audit or accreditation expectations. Preferred Experience in a large integrated delivery network or multi-hospital health system. Familiarity with IoMT security platforms such as Cynerio or Medigate. Knowledge of CMMS/CMDB integration, asset data governance, network segmentation, zero trust, and VLANs. Certifications such as PMP, PgMP, CISSP, HCISPP, or CISM. Work Environment Primarily onsite role supporting multiple Sentara Health facilities. Enterprise-level coordination across hospitals, ambulatory sites, imaging centers, and related clinical locations. Occasional after-hours engagement may be required for critical issues or major changes. Why Join Sentara? This is an opportunity to lead a high-impact cybersecurity program that directly supports patient safety, clinical operations, and enterprise risk reduction across a complex healthcare environment. Talroo-IT , PMP, PgMP, CISSP, HCISPP, or CISM, IoMT, Cynerio, Medigate, cybersecurity, program management, enterprise medical device, healthcare IT, clinical engineering We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $120,744.00 - $183,164.80 annually. Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually. Benefits: Caring For Your Family and Your Career • Medical, Dental, Vision plans • Adoption, Fertility and Surrogacy Reimbursement up to $10,000 • Paid Time Off and Sick Leave • Paid Parental & Family Caregiver Leave • Emergency Backup Care • Long-Term, Short-Term Disability, and Critical Illness plans • Life Insurance • 401k/403B with Employer Match • Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education • Student Debt Pay Down – $10,000 •Pet Insurance •Legal Resources Plan •Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met. Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission “to improve health every day,” this is a tobacco-free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.