Closed role

Project Manager, Medical Device Cybersecurity

Own a portfolio of client-facing cybersecurity and regulatory projects from kickoff through closeout, coordinating delivery across specialized internal teams.

This role is closed

We are not taking applications for this position right now. See the current openings, or get notified when it reopens.

All open roles

Reports to: Director of Operations
Status: Full-time employee, 40 hours per week
Location: Remote (United States), with overlap to 9 to 5 ET
Compensation: Competitive, commensurate with experience, paid every two weeks, plus benefits including health, dental, vision, 401(k), and an educational allowance
Equipment: Bring your own laptop and setup, and we cover the project-specific hardware and lab gear the work needs

About the role

Blue Goat Cyber is expanding, and we are looking for an experienced Project Manager who can independently own a portfolio of client-facing projects from kickoff through closeout. Our projects may involve penetration testing, documentation, quality review, regulatory support, and multiple client stakeholders, so this role requires someone who can keep complex work moving while maintaining clear ownership, timelines, dependencies, and communication.

This is not an entry-level project management role. We are looking for someone who already knows how to manage projects, make sound decisions, prioritize competing needs, communicate confidently with clients, and proactively solve problems. We will train you on Blue Goat Cyber, our clients, workflows, services, and processes; we are not looking to teach the fundamentals of project management.

The Project Manager serves as the primary project-management point of contact for assigned clients and coordinates delivery across specialized internal teams. You are not expected to be the technical subject-matter expert, but you must learn enough about cybersecurity and regulatory work to manage it effectively, ask the right questions, route issues to the right people, and ensure answers and deliverables do not fall through the cracks.

You are a fit if

You bring order to complexity and own delivery

You are naturally organized and can bring order to multiple moving pieces across a substantial portfolio of client projects.
You consistently follow through, close loops, and keep work moving without needing repeated reminders.
You know the current status, next step, owner, and major risk for every project in your portfolio.
You prioritize effectively across competing deadlines, dependencies, client needs, and internal capacity.

You communicate proactively and protect client trust

You provide clear, professional updates before clients or leadership have to ask.
You set realistic expectations, communicate delays or dependencies early, and are comfortable having difficult conversations.
You communicate complex information clearly and leave people knowing the status, next step, and owner.
You respectfully follow up, push for answers, and escalate when a project needs action.

You anticipate problems and use sound judgment

You identify risks, blockers, and missing information before they become client escalations.
You are solutions-oriented and work to determine the next best step rather than simply identifying a problem.
You remain calm and solution-focused under pressure and adapt when priorities or timelines change.
You can work independently in a growing company and use sound judgment about when to act, clarify, or escalate.

You coordinate across teams

You work effectively across pen testing, documentation, QA, regulatory, and other delivery functions.
You track handoffs and dependencies and prevent work from sitting between departments because ownership is unclear.
You understand how your decisions and follow-up affect the broader team and client experience.
You collaborate well across different personalities and specialized experts without losing accountability for the project.

You respect the operating system while helping improve it

You keep Asana, project records, decisions, action items, and deadlines current.
You follow established PM workflows, templates, naming conventions, and SOPs.
You flag missing or unclear processes and recommend improvements through the appropriate channel.
You notice recurring inefficiencies and help improve the way projects are delivered.

What you will own

Project ownership and delivery management

Own assigned client projects from kickoff through closure and manage them through the full project lifecycle.
Maintain project timelines, milestones, deliverables, dependencies, owners, and next steps.
Ensure projects keep progressing and proactively follow up when work is stalled.
Maintain accurate project information and status in Asana.
Identify risks, blockers, delays, or missing information before they significantly impact delivery.
Escalate issues appropriately and coordinate project closeout activities.

Client communication and experience

Serve as the primary project-management point of contact for assigned clients.
Provide proactive, professional project updates and set realistic expectations.
Schedule and facilitate recurring and milestone-based client meetings.
Communicate delays, dependencies, and required client actions clearly.
Ensure client questions reach the right technical or regulatory team member and own the follow-through until the client receives an answer.

Cross-functional delivery coordination

Coordinate work across pen testing, documentation, QA, regulatory, and other applicable teams.
Confirm team members understand upcoming deadlines and dependencies, and track handoffs between functions.
Coordinate internal preparation before client meetings when necessary.
Surface competing priorities and resource constraints.
Ensure changes affecting a project are communicated to everyone who needs visibility.

Documentation, risk, and leadership visibility

Keep Asana project records, folders, decisions, action items, owners, and deadlines current and accurate.
Follow established PM processes, templates, naming conventions, and SOPs.
Monitor deadlines and aging action items and identify projects at risk of delay.
Escalate resource constraints, outstanding client dependencies, and unresolved blockers.
Prepare for and participate in weekly PM and delivery stand-ups and keep high-level project statuses accurate.

Required skills and experience

5+ years of project management experience, preferably managing multiple client-facing projects simultaneously.
Demonstrated experience managing a portfolio of concurrent projects with competing priorities, deadlines, and dependencies.
Experience in a client-facing professional services, consulting, technology, cybersecurity, healthcare, medical device, or other technical environment.
Experience coordinating work across multiple teams or specialized subject-matter experts.
Strong experience with project management systems; Asana experience is preferred.
Experience managing projects through the full lifecycle, from kickoff through delivery and closeout.
Experience facilitating client and internal project meetings.
Demonstrated experience managing timelines, deliverables, dependencies, risks, blockers, and escalations.
Strong written and verbal communication skills in a remote work environment.
Ability to manage a substantial workload with limited day-to-day supervision.
Ability to learn enough about technical and regulatory projects to manage the work effectively without serving as the technical expert.

Preferred experience

PMP certification is strongly preferred.
Experience in cybersecurity, MedTech, medical devices, FDA and regulatory work, or another highly regulated industry.
Experience managing penetration testing, cybersecurity, compliance, regulatory documentation, or technical consulting projects.
Experience working with distributed remote teams.
Experience supporting enterprise or complex B2B clients.
Familiarity with FDA submission or medical device project environments.

Your first 90 days

What success looks like early on, so you know what you are walking into.

1
First 30 days
- Learn our services, delivery workflow, Asana structure, and client roster.
- Take over a small set of active projects and run their recurring client meetings.
- Meet every delivery function and learn who owns what and how handoffs happen.
2
Days 30 to 60
- Own a full portfolio and be the project-management point of contact for those clients.
- Run kickoffs and closeouts independently and keep status accurate without being asked.
- Spot and escalate the first delivery risks before they reach the client.
3
Days 60 to 90
- Manage the portfolio with limited day-to-day supervision and predictable delivery dates.
- Handle a difficult scope or timeline conversation with a client and land it well.
- Propose at least one improvement to how projects move between teams.

Tools we use

Asana
Google Workspace
Slack
Zoom
Notion
Microsoft SharePoint and Teams
PandaDoc

About Blue Goat Cyber

Blue Goat Cyber is a medical device cybersecurity company dedicated to protecting patient lives by securing the technologies that power modern healthcare. We support medical device manufacturers as they build, test, and launch secure devices that meet FDA expectations and operate safely in the real world.

We are a remote, high-trust, high-ownership team that values clear communication, rigorous thinking, proactive problem solving, continuous learning, and attention to critical details. We expect every team member to own their work, communicate clearly, and support the mission without ego.

Before you apply

The terms every person here works under. Read them now rather than at offer stage, along with our core values and the honest list of who this is not for. See also what excellence looks like here, the eight standards we hire against.

Work authorization

You must be authorized to work in the United States. We do not sponsor visas for these roles.
All roles are performed from within the United States.

Confidentiality and NDA

You will sign a mutual nondisclosure agreement before you see any client material, and client-specific NDAs where a client requires one.
You will see unreleased device designs, firmware, source code, vulnerabilities, and submission content. None of it is yours to discuss, publish, screenshot, or reference, during or after the engagement.
Client material stays in company systems. No personal cloud storage, personal email, personal repositories, or unvetted AI tools.
Anything we publish that draws on client work is anonymized and cleared with the client first.

How we expect you to use AI

Use AI every day if it helps, on the company ChatGPT and Claude accounts we provide, and keep client material inside them: firmware, source code, submission documents, findings, and client names never go anywhere else.
You own the accuracy of anything you send out, because models get recognition numbers, clause references, and test conclusions wrong in ways that read perfectly well. The full policy is in the careers FAQ.

Security and background

Offers are contingent on a background check and on reference checks.
You will use company-required security controls on any device that touches client data, including full-disk encryption, screen lock, and our password manager and multi-factor authentication.
Report a suspected compromise or data exposure immediately. We treat honest, fast reporting as the right behavior, not a fault.
Some client engagements require additional screening or training before you can be assigned.

Equal opportunity

Blue Goat Cyber is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.
If you need an accommodation at any point in the hiring process, tell us and we will arrange it.