Jobs › Jones Lang LaSalle

CMMC / FedRAMP Program Manager

Jones Lang LaSalle · Chicago, IL · Full time

Posted Sep 11, 2026 · We last checked this listing on Oct 6, 2026

Apply at Jones Lang LaSalle

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

You're the central coordinator between IT, legal, sourcing and executive leadership. Tell me about a time you kept a program moving when those groups wanted different things.

What they are checking: Whether they can hold authority through coordination alone, since none of these groups report to them.

Tell me about a dependency between workstreams that you caught late. What happened and what did you change?

What they are checking: Whether they own misses honestly and actually fix the tracking that let the miss happen.

Tell me about the largest compliance or security program you've managed. What was your actual role in getting it across the line?

What they are checking: Whether their experience matches enterprise scale and whether they separate their own work from the team's.

What would you do

How would you set up the daily and weekly execution cadence for a program this size in your first month?

What they are checking: Whether they have a concrete operating rhythm or only talk about governance in general terms.

Sourcing has a key vendor who can't show they handle controlled unclassified information properly. What do you do?

What they are checking: Whether they see supplier flow-down as a real compliance risk and can push for a decision instead of waiting.

How would you explain a plan of action and milestones to a business leader who has never heard of NIST 800-171?

What they are checking: Whether they can translate control language into business impact a non-specialist will act on.

An executive asks you to commit to a certification date that you think is unrealistic. How do you handle that conversation?

What they are checking: Whether they will give leaders a straight answer about schedule risk instead of promising what they can't deliver.

About the work

Walk me through how CMMC and FedRAMP differ, and why a company might need both at once.

What they are checking: Whether they understand the two frameworks well enough to run them side by side without mixing up scope.

What goes on a compliance program dashboard that an executive will actually read?

What they are checking: Whether they can turn hundreds of controls into a few signals that drive decisions at the top.

How do you prepare an organization for an assessment by a third-party assessor, like a C3PAO or a 3PAO?

What they are checking: Whether they know the evidence, interviews and timing a real external assessment demands.

How do you build and maintain a risk register so it stays useful rather than becoming a list nobody opens?

What they are checking: Whether they treat risk tracking as a living tool with owners and dates, not a compliance artifact.

Practice this interview out loud.

Offer builds a real interview for this exact role at Jones Lang LaSalle from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Jones Lang LaSalle.

JLL empowers you to shape a brighter way . Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. CMMC / FedRAMP Program Manager - JLL What this job involves: This role leads the enterprise-wide implementation of CMMC and FedRAMP compliance programs, serving as the central coordinator between IT, legal, sourcing, and executive leadership. The position manages day-to-day program execution, coordinates external assessments with third-party organizations, and establishes governance frameworks including dashboards and risk tracking. What your day to day will look like : • Lead the rollout of CMMC and FedRAMP program readiness strategies and implementation plans. • Act as the central coordinator between IT, legal, sourcing, and executive leadership across both the CMMC and FedRAMP programs. • Own day-to-day program orchestration — running the daily/weekly execution cadence, tracking cross-workstream dependencies, and escalating blockers before they put timelines at risk. • Prepare the enterprise for external assessments by managing internal gap analyses and remediation planning. • Liaise with Certified Third-Party Assessment Organizations (C3PAOs) for CMMC and Third-Party Assessment Organizations (3PAOs) for FedRAMP. • Establish program scorecards, executive dashboards, and risk management tracking for compliance metrics. • Drive organizational training and stakeholder engagement. • Drive adoption and ongoing maintenance of secure handling policies for Controlled Unclassified Information (CUI), developed in coordination with legal and security teams. • Lead and orchestrate the FedRAMP authorization process end-to-end, driving the schedule for System Security Plan (SSP) development and control implementation performed by technical/security SMEs against NIST SP 800-53 milestones. • Coordinate with Third-Party Assessment Organizations (3PAOs), sponsoring agencies, and the FedRAMP PMO, and manage ongoing continuous monitoring obligations post-authorization. Required Qualifications: • Bachelor's degree in a relevant field such as business, computer science, or cybersecurity. • 5+ years in program management or government contracting, orchestrating cross-functional initiatives across IT, legal, and executive stakeholders. • Prior experience in a compliance or information security program environment (e.g., CMMC, FedRAMP, NIST 800-series), gained through partnering with SMEs rather than personally performing the technical work. • Working knowledge of NIST SP 800-171, NIST SP 800-172, and CMMC standards, as well as NIST SP 800-53 and the FedRAMP authorization process, sufficient to manage subject-matter experts, sequence dependent workstreams, and translate technical risk for executive stakeholders. • Strong project leadership and communication skills. • Experience with Governance, Risk, and Compliance (GRC) tools. Preferred Qualifications: • Experience preparing organizations for third-party or regulatory assessments. Location : Washington, DC (on-site), but will consider Chicago, IL (on-site) Clearance/Certifications: Will need to obtain Top Secret Clearance, if doesn't have one already This position does not provide visa sponsorship. Candidates must be authorized to work in the United States without sponsorship. Estimated compensation for this position: 140,000.00 – 155,000.00 USD per year This range is an estimate and actual compensation may differ. Final compensation packages are determined by various considerations including but not limited to candidate qualifications, location, market conditions, and internal considerations. Location: On-site –Chicago, IL, Washington, DC Job Tags: Public Institutions If this job description resonates with you, we encourage you to apply, even if you don’t meet all the requirements. We’re interested in getting to know you and what you bring to the table! Personalized benefits that support personal well-being and growth: JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health. Some of these benefits may include: • 401(k) plan with matching company contributions • Comprehensive Medical, Dental & Vision Care • Paid parental leave at 100% of salary • Paid Time Off and Company Holidays • Early access to earned wages through Daily Pay At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you're pursuing. JLL Privacy Notice Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely. For more information about how JLL processes your personal data, please view our Candidate Privacy Statement . For additional details please see our career site pages for each country. For candidates in the United States, please see a full copy of our Equal Employment Opportunity policy here . Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at HRSCLeaves@jll.com . This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL. Pursuant to the Arizona Civil Rights Act, criminal convictions are not an absolute bar to employment. Pursuant to Illinois Law, applicants are not obligated to disclose sealed or expunged records of conviction or arrest. Pursuant to Columbia, SC ordinance, this position is subject to a background check for any convictions directly related to its duties and responsibilities. Only job-related convictions will be considered and will not automatically disqualify the candidate. California Residents only If you are a California resident as defined in the California Consumer Privacy Act (CCPA) please view our Supplemental Privacy Statement which describes your rights and disclosures about your personal information. If you are viewing this on a mobile device you may want to view the CCPA version on a larger device. Pursuant to the Los Angeles Fair Chance Initiative for Hiring Ordinance, JLL will consider for employment all qualified Applicants, including those with Criminal Histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Accepting applications on an ongoing basis until candidate identified.

Apply at Jones Lang LaSalle