Gary Nelson
About Gary Nelson
Gary Nelson serves as the Principal for the Southeast Region at Schellman, where he has worked since 2006. He specializes in compliance engagements and holds multiple certifications, including HITRUST CHQP.
Work at Schellman
Gary Nelson has served as Principal for the Southeast Region at Schellman since 2006. In this role, he focuses on delivering exceptional customer service in compliance engagements. His expertise includes HITRUST, SOC 1, SOC 2, SOC 3, privacy assessments, PCI-DSS validation, ISO 27001 certification, HIPAA compliance, and FISMA compliance. His extensive experience in the field positions him as a key figure in the Greater Atlanta Area, where he has contributed to numerous compliance projects over the past 18 years.
Previous Experience
Before joining Schellman, Gary Nelson held various positions in the compliance and audit sectors. He worked at Carnival Corporation as Manager of Audit Services Compliance Systems from 2004 to 2006. Prior to that, he was a Senior Technology Risk Consultant at Protiviti for one year and served as a Senior IT Auditor at Americold Logistics for five months. His career began at Arthur Andersen & Co. as a Technology Risk Consultant from 2000 to 2002, and he also completed an internship in Internal Audit at Vulcan Materials in 1999.
Education and Expertise
Gary Nelson earned a B.S. in Accounting from the University of Alabama, where he studied from 1992 to 1998. He later achieved a Master's degree in Accounting from the same institution, completing his studies in 2000. His educational background supports his specialization in compliance and risk management, particularly in sectors such as technology, healthcare, and finance. He holds the HITRUST CHQP certification, obtained in 2020, and has acquired a total of 11 professional certifications in information security, IT audit, and healthcare compliance.
Specializations
Gary Nelson specializes in performing examinations and assessments across various markets, including technology, healthcare, insurance, financial services, transportation, and telecommunications. His expertise extends to DEA e-prescription and pharmacy application compliance (DEA EPCS), showcasing his ability to navigate complex regulatory environments. This specialization allows him to address diverse compliance needs effectively, ensuring that organizations meet industry standards and regulations.