CMMC / FedRAMP Program Manager

Jones Lang LaSalle Incorporated; Washington, Northern (District of Columbia, KY); Hybrid; USD 140,000 - 155,000; Full time

Job summary

Jones Lang LaSalle Incorporated is seeking a CMMC / FedRAMP Program Manager to lead enterprise-wide compliance efforts from readiness through authorization. You will coordinate IT, legal, sourcing, and executive stakeholders, drive the program cadence, and manage external assessments with C3PAOs and 3PAOs.

The role requires a bachelor's degree and 5+ years in program management or government contracting, with strong knowledge of NIST 800-series and GRC tooling.

Qualifications

• Bachelor's degree in a relevant field such as business, computer science, or cybersecurity.
• 5+ years in program management or government contracting, orchestrating cross-functional initiatives across IT, legal, and executive stakeholders.
• Experience with Governance, Risk, and Compliance (GRC) tools.
• Experience with CMMC, FedRAMP, or NIST 800-series compliance programs.

Responsibilities

• Lead enterprise-wide rollout of CMMC and FedRAMP readiness strategies and implementation plans.
• Coordinate with IT, legal, sourcing, and executive leadership across CMMC and FedRAMP programs.
• Manage day-to-day program execution, track dependencies, and escalate blockers.
• Prepare for external assessments with gap analyses and remediation planning.
• Liaise with C3PAOs/3PAOs and manage SSP development and control implementation milestones.

Skills

Program management

Cross-functional leadership

GRC tools

Security frameworks

NIST SP 800-53

Education

Bachelor's degree

Tools

GRC tools

Job description

**CMMC / FedRAMP Program Manager - JLL****What this job involves:** This role leads the enterprise-wide implementation of CMMC and FedRAMP compliance programs, serving as the central coordinator between IT, legal, sourcing, and executive leadership. The position manages day-to-day program execution, coordinates external assessments with third-party organizations, and establishes governance frameworks including dashboards and risk tracking. **What your day to day will look like**:* Lead the rollout of CMMC and FedRAMP program readiness strategies and implementation plans.* Act as the central coordinator between IT, legal, sourcing, and executive leadership across both the CMMC and FedRAMP programs.* Own day-to-day program orchestration — running the daily/weekly execution cadence, tracking cross-workstream dependencies, and escalating blockers before they put timelines at risk.* Prepare the enterprise for external assessments by managing internal gap analyses and remediation planning.* Liaise with Certified Third-Party Assessment Organizations (C3PAOs) for CMMC and Third-Party Assessment Organizations (3PAOs) for FedRAMP.* Establish program scorecards, executive dashboards, and risk management tracking for compliance metrics.* Drive organizational training and stakeholder engagement.* Drive adoption and ongoing maintenance of secure handling policies for Controlled Unclassified Information (CUI), developed in coordination with legal and security teams.* Lead and orchestrate the FedRAMP authorization process end-to-end, driving the schedule for System Security Plan (SSP) development and control implementation performed by technical/security SMEs against NIST SP 800-53 milestones.* Coordinate with Third-Party Assessment Organizations (3PAOs), sponsoring agencies, and the FedRAMP PMO, and manage ongoing continuous monitoring obligations post-authorization.**Required Qualifications:*** Bachelor's degree in a relevant field such as business, computer science, or cybersecurity.* 5+ years in program management or government contracting, orchestrating cross-functional initiatives across IT, legal, and executive stakeholders.* Prior experience in a compliance or information security program environment (e.g., CMMC, FedRAMP, NIST 800-series), gained through partnering with SMEs rather than personally performing the technical work.* Working knowledge of NIST SP 800-171, NIST SP 800-172, and CMMC standards, as well as NIST SP 800-53 and the FedRAMP authorization process, sufficient to manage subject-matter experts, sequence dependent workstreams, and translate technical risk for executive stakeholders.* Strong project leadership and communication skills.* Experience with Governance, Risk, and Compliance (GRC) tools.**Preferred Qualifications:*** Experience preparing organizations for third-party or regulatory assessments.**Location**: Washington, DC (on-site), but will consider Chicago, IL (on-site)**Clearance/Certifications:** Will need to obtain Top Secret Clearance, if doesn't have one alreadyThis position does not provide visa sponsorship. Candidates must be authorized to work in the United States without sponsorship.**Estimated compensation for this position:**140,000.00 – 155,000.00 USD per year*This range is an estimate and actual compensation may differ. Final compensation packages are determined by various considerations including but not limited to candidate qualifications, location, market conditions, and internal considerations.*