Independent attestation and compliance assessor for SOC, FedRAMP, PCI and ISO
Schellman is a Tampa-based compliance and attestation firm whose stack goes well beyond typical audit shops: AWS EKS, Kubernetes, Terraform and GitLab point to in-house software, with AWS Bedrock signaling early generative AI work. Accelerating, senior-weighted hiring is led by security, while sales pain points around winning new enterprise accounts and expanding federal DoD presence show a firm pushing into new markets.
Schellman, founded in 2002 and headquartered in Tampa, Florida, provides attestation, certification and security assessment services. Its offerings span SOC 1, SOC 2 and SOC 3 examinations, ISO 27001 certification, FedRAMP 3PAO assessments, PCI DSS validation, HITRUST certification, penetration testing and privacy assessments covering GDPR, HIPAA and state laws. Clients can address several compliance frameworks through one engagement team. The privately held firm employs 501–1,000 people and currently hires in the United States.
Schellman runs on AWS (EKS, Aurora, Bedrock), Kubernetes, Docker, Terraform and GitLab, with Okta, Duo, Zscaler and JumpCloud for security, plus HubSpot, Workday, Power BI, Workato and Coupa for business operations.
Yes. Security is the leading hiring area at Schellman, with mostly senior-level openings in the United States, alongside smaller needs in finance, sales, legal, marketing, HR and operations.
Schellman delivers SOC 1/2/3 examinations, ISO 27001 certification, FedRAMP 3PAO assessments, PCI DSS validations, HITRUST certification, penetration and vulnerability testing, and privacy assessments for GDPR, HIPAA and state laws.
Other companies in the same industry, closest in size
Schellman's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.