Open to opportunities

Chuck Unaegbu

@chuckunaegbu

Senior GRC analyst at KLDiscovery managing vendor risk and RMF authorization documentation.

At KLDiscovery, I support GRC, cybersecurity risk, TPRM, and RMF activities across federal and commercial environments. I manage A&A documentation, including SSPs, SAPs, SARs, POA&Ms, and Continuous Monitoring plans.

I lead third-party cybersecurity risk assessments and reassessments, reviewing vendor security, privacy, resilience, and assurance evidence. I work with Legal, Procurement, IT, Privacy, and Risk stakeholders on vendor suitability, contractual security, and remediation.

At Freddie Mac, I executed enterprise risk, compliance, and third-party control assessments. I developed reporting on control maturity, residual risk, remediation, and SLA adherence.

Earlier, at Guidehouse, I supported federal FISMA and FedRAMP compliance and conducted third-party assessments for more than 300 vendors. I also reduced complaint resolution time by 25% through process redesign and automated tracking.

Experience

Work history, roles, and key accomplishments

Current

Senior Risk & Compliance Analyst / ISSO

Current

KLDiscovery

Jan 2022 - Present (4 years 9 months)

Supports third-party risk management, GRC, and RMF activities for a global eDiscovery firm, including managing A&A documentation and performing security control assessments. Leads vendor risk assessments and collaborates with stakeholders to evaluate vendor security and compliance.

GRC TPRM RMF ISSO NIST SP 800 53 FedRAMP CMMC Azure AWS SOC2 ISO 27001 SIG Risk Register Continuous Monitoring Microsoft Copilot ChatGpt

Senior Risk Analyst

Freddie Mac

Jan 2021 - Dec 2022 (1 year 11 months)

Executed enterprise risk, compliance, and third-party control assessments, reviewing vendor security evidence and coordinating remediation. Developed risk and compliance reporting for stakeholders and leadership.

Enterprise Risk Compliance TPRM Vendor Risk Management Risk Reporting Control Assessment remediation

Compliance & Risk Analyst

Guidehouse

Jan 2019 - Dec 2021 (2 years 11 months)

Supported federal programs with FISMA/FedRAMP compliance, control testing, and risk assessments. Conducted third-party risk assessments for over 300 vendors and reduced complaint resolution time by 25% through process redesign.

FISMA FedRAMP RMF SSP SARs POA&M Third Party Risk Vendor Assessment SOC Reporting Process Improvement

IT Auditor

CohnReznick

Jan 2018 - Dec 2019 (1 year 11 months)

Conducted FISMA- and ISO 27001-aligned IT audits and vendor security assessments for federal and financial environments. Reviewed SOC 2, PCI DSS, and penetration testing documentation, supporting RMF and remediation tracking.

FISMA ISO 27001 SOC2 PCI DSS RMF IT Audit Vendor Security Continuous Monitoring

IT Auditor

Deloitte

Jan 2017 - Dec 2018 (1 year 11 months)

Supported FISMA audit readiness and RMF compliance for IRS systems, reviewing security documentation and performing control testing. Coordinated ATO documentation and corrective-action validation with system owners.

FISMA RMF NIST SP 800 53 Control Testing ATO SSP SARs POA&M

IT Compliance Auditor

Wells Fargo

Jan 2015 - Dec 2017 (2 years 11 months)

Executed ITGC, SOX, COBIT, and operational control assessments, documenting design and operating effectiveness. Maintained audit-ready control documentation and coordinated corrective-action validation.

ITGC SOX COBIT Control Assessment Audit documentation remediation