Pros
Schellman & CO (formally Brightline) is literally the best place to work if you have a few years of IT audit / IT assessment experience. They will pay you better than anywhere else and you will be able to do much more and learn more than anywhere else at the senior level. The benefits are the best in class and you get to work remote when not travelling. The people at Schellman are all top performers, because you have to be to handle the level of work you get. You cannot sit around during a job, but have to be hitting it hard every minute you can. Otherwise you will really fall behind. There is no time reporting so you don't have to worry about that, they just put you somewhere for a week or two and you have to get the work done during those weeks. You get a ton of travel money (especially if you travel internationally) and 150 dollar tech credit each month. They do ISO 27001, HITRUST/HIPPA, PCI, SOC 1 & 2, NIST, and FedRAMP assessments. you could get exposure to all of these if you want, and you are able to work for really great clients (some of the best out there). They are always winning work so there is not a horrible push by upper management to sell work, even at the manager level. They sell work because they are the best of the best and clients know that. If you want to work hard and be compensated hard this is the place. If you are a top performer but your companies managed keeps screwing you every year on reviews and bonuses, this is the place. Because they will respect and compensate you. You are left to do your work with very little oversight (you just have to make sure you get it done).
Cons
You work a lot, but the compensation makes up for that. They are flexible when you need them to be, or if you have something going on. You travel a lot (not all practices travel the same but ISO travels a lot!). Sometime there might not be a great promotion path if the need isn't there (but the Big 4 are the same).