Fall 2026
Posted on 8/21/2026
Automates cybersecurity compliance audits with software
No salary listed
Tampa, FL, USA
In Person
Bachelor's
See people who can refer or advise you
A-LIGN is a cybersecurity and compliance solutions provider that combines automated software with audit services. Its flagship platform, A-SCEND, automates the audit process by handling evidence collection, policy management, and real-time compliance assessments, helping clients become audit-ready in about half the time and saving hundreds of hours. The company earns revenue from software sales and audit services and uses a single-provider model to offer an end-to-end compliance solution that scales with a business. A-LIGN differentiates itself through its extensive audit experience and claims to have issued more SOC 2 reports than any other provider. Its goal is to simplify and accelerate the process of achieving and maintaining cybersecurity compliance for organizations of all sizes.
Company Size
501-1,000
Company Stage
Acquired
Total Funding
$54.5M
Headquarters
Tampa, Florida
Founded
2009
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Wellness Program
Mental Health Support
Gym Membership
Phone/Internet Stipend
Conference Attendance Budget
Family Planning Benefits
Fertility Treatment Support
FinQuery names Ryan Grace as CRO. As the company accelerates its expansion into debt and fixed asset accounting, the market leader taps a $1B-exit veteran to scale its multi-product growth Redação Portal ERP Jul 30, 2026 T | Fonte: 18px FinQuery announced the appointment of Ryan Grace as Chief Revenue Officer. In his new role, Grace will oversee go-to-market strategy as the company expands its AI-powered subledger Platform, the system of record for corporate financial obligations and capital assets, including leases, fixed assets, debt and accruals. The strategic addition comes as FinQuery accelerates its product roadmap to support corporate accounting and finance teams across a wider spectrum of complex balance sheet requirements. Grace will lead commercial execution as the company scales its multi-product Platform to capture broader market share. Grace joins FinQuery following three and a half years as CRO at A-LIGN, where he built the high-velocity revenue organization that culminated in the company's $1B+ exit to Hg Capital in 2025. Over his career, Grace has specialized in scaling multi-product revenue operations and turning partnership ecosystems into primary growth engines, including playing a key role in HERO's acquisition by Klarna. "FinQuery has built an incredible foundation of customer trust by solving some of the most complex challenges in accounting," said Joe Schab, CEO of FinQuery. "As we continue to accelerate our product roadmap and deliver broader value to our clients, we need a revenue leader who knows how to scale multi-product organizations. Ryan has proven time and again that he knows how to capture market share at this exact stage of growth." Grace's appointment comes during a period of significant corporate momentum. Following a majority growth investment from TA Associates, the company has strategically built out its executive bench, recently adding Chief Marketing Officer Jake Fabbri and SVP of Customer Success Mike Gerson. "I'm joining FinQuery at a true inflection point - the kind of moment where a team can multiply its impact," said Ryan Grace, newly appointed CRO. "FinQuery has earned something most tech companies never achieve: genuine customer trust. That trust is our permission slip for what comes next. Leases were the wedge; total financial obligations are the market. My job is to build a go-to-market engine that matches the massive ambition of our product portfolio, ensuring our existing customers continue to feel flawlessly served while we move fast." Redação Portal ERP. Editorial Team
Kiteworks and A-LIGN partner to strengthen cybersecurity across the Defense Industrial Base. Partnership helps organizations protect sensitive data, strengthen cyber resilience, and prepare for evolving compliance requirements, including CMMC 2.0. San Mateo, California | July 22, 2026 Kiteworks, which empowers organizations to effectively manage risk in every send, share, receive, and use of private data, today announced a strategic partnership with A-LIGN, a leading CMMC Third Party Assessor Organization (C3PAO), to help Defense Industrial Base (DIB) organizations strengthen their cybersecurity posture and navigate the path to CMMC 2.0 Level 2 certification. The Department of War suspended CMMC Phase II on July 13, 2026, and launched a 60-day review of the program, but the underlying responsibility has not changed: Phase I self-assessment requirements and DFARS 252.204-7012 obligations remain fully in force. The DoW has been explicit that it is reducing red tape, not cybersecurity expectations. Protecting the Controlled Unclassified Information handled by tens of thousands of DIB organizations remains essential to defending the supply chain against increasingly sophisticated threats. The Kiteworks and A-LIGN partnership is built around a shared goal of helping DIB contractors protect that data, whether they are beginning to build out their data exchange controls or already in the assessment process and stalled on control gaps or evidence deficiencies. Organizations deploy the Kiteworks Control Plane to implement a substantial majority of CMMC Level 2 requirements out of the box, covering domains that commonly surface as evidence gaps in third-party assessments. Then, they can separately engage A-LIGN to independently assess that evidence through its rigorous assessment process. A-LIGN's role in this partnership is limited to independent assessment: A-LIGN does not consult, remediate, or advise on control implementation, and DIB organizations remain free to engage any authorized or accredited C3PAO. Kiteworks is FedRAMP High In Process and FedRAMP Moderate Authorized, with nine consecutive years of annual 3PAO audits validating 325 NIST 800-53 controls since 2017. The platform is FIPS 140-3 validated and deploys as a hardened single-tenant virtual appliance, eliminating the CUI isolation failures that are among the most common reasons DIB organizations require remediation cycles before earning CMMC certification. In addition, Kiteworks supports Hold Your Own Key (HYOK) encryption, giving DIB customers full ownership of their cryptographic keys and reducing audit scope and third-party exposure. "Protecting the DIB was never about a single deadline, but rather about building data security practices durable enough to hold up no matter how the compliance timeline evolves," said Kurt Michael, Chief Revenue Officer, Kiteworks. "Kiteworks and A-LIGN share that same vision. Through our partnership, Kiteworks helps organizations put comprehensive controls at the data layer, and A-LIGN, a top C3PAO, brings the experience and rigor to help validate that work through independent assessment. Whether an organization is early in the process or already underway, Kiteworks helps them get the right controls in place so they can walk into the assessment room prepared." A-LIGN is one of the leading C3PAOs in the market and has conducted nearly 100 CMMC Level 2 assessments across DIB organizations of every size. The firm's assessors cover the full scope of CMMC Level 2, including the governance, personnel, physical, and organizational controls. Beyond CMMC, A-LIGN is also one of the top three FedRAMP assessors, with a team of auditors with deep, firsthand familiarity with how federal agencies expect compliance evidence to be documented and defended. "There's some uncertainty right now about when, and in what form, CMMC's third-party assessment requirements will return from the Department's review, but the underlying requirements haven't gone anywhere," said Nicholas Ludy, Chief Growth Officer, A-LIGN. "The commitment to securing the DIB doesn't hinge on any single implementation date. As CMMC requirements evolve, Kiteworks will keep giving DIB organizations a practical path to stronger data security and audit readiness, and A-LIGN will continue to deliver rigorous, independent assessments, so organizations are prepared whenever the certification timeline is finalized." About Kiteworks Kiteworks' mission is to empower organizations to effectively manage risk in every send, share, receive, and use of private data. The Kiteworks platform provides customers with a secure data exchange that delivers data governance, compliance, and protection in a unified control plane. Kiteworks unifies, tracks, controls, and secures sensitive data moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all private data exchanges. Headquartered in Silicon Valley, Kiteworks protects over 100 million end-users and thousands of global enterprises and government agencies. About A-LIGN A-LIGN is the leading cybersecurity compliance partner, trusted by over 6,400 organizations worldwide to navigate the complexities of compliance, audit, and risk. With a tech-enabled delivery model and deep domain expertise, A-LIGN has completed more than 36,000 audits. It is the #1 issuer of SOC 2 reports and a top three FedRAMP assessor. Founded in 2009, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST. To learn more, visit: https://www.a-lign.com. Additional Resources A-LIGN's recognition of this partnership does not constitute or imply partiality in its assessment activities. As a CMMC Third-Party Assessment Organization (C3PAO), A-LIGN applies the same rigor, scrutiny, and standardized processes to all assessments regardless of an organization's RPO affiliation, technology platform, or partner status. A-LIGN maintains a diverse portfolio of partnerships expressly to prevent any single relationship from creating dependencies that could impair its professional judgment, objectivity, or independence. All assessments are conducted in strict accordance with CMMC assessment guidelines and its impartiality obligations. A-LIGN provides assessment services only. It does not consult, remediate, or advise on control implementation; CMMC certification outcomes are determined solely by independent evaluation of evidence against 32 CFR Part 170 and NIST SP 800-171; and DIB organizations may engage any Authorized or Accredited C3PAO. Get started. It's easy to start ensuring regulatory compliance and effectively managing risk with Kiteworks. Join the thousands of organizations who are confident in how they exchange private data between people, machines, and systems. Get started today.
Optro, formerly AuditBoard, has partnered with Crowe and A-LIGN to provide an end-to-end solution for organisations seeking Cybersecurity Maturity Model Certification (CMMC) ahead of the November 2026 deadline. Without certification, organisations cannot contract with the US Department of Defense. The solution creates a coordinated ecosystem where Crowe helps interpret requirements and build compliance programmes, Optro enables implementation through its AI-powered GRC platform, and A-LIGN conducts official assessments. The partnership aims to help thousands of organisations currently contracting with the Department of Defense meet the certification requirements. Optro serves more than 50% of the Fortune 500 and was named a Leader in Gartner's 2025 Magic Quadrant for GRC Tools.
Optro teams up with Crowe and A-LIGN, providing end-to-end CMMC solution. PR Newswire Today at 6:00am PDT Solution launches ahead of the November 2026 Cybersecurity Maturity Model Certification (CMMC) deadline, helping organizations meet new requirements for contracting with the U.S. Department of Defense. LOS ANGELES, May 21, 2026 /CNW/ - Optro (formerly AuditBoard), the leading AI-powered GRC platform empowering enterprises to transform risk into opportunity, today announced a joint solution with Crowe, a leading public accounting and consulting firm, and A-LIGN to help organizations achieve Cybersecurity Maturity Model Certification (CMMC) ahead of the November 2026 deadline. Without the certification, organizations will no longer be able to contract with the United States Department of Defense. "Thousands of organizations currently contracting - or hoping to contract - with the Department of Defense must obtain certification before the November deadline," said Jim Sperduto, Chief Growth Officer at Optro. "Our new solution reduces risk and increases confidence, preparing customers for their CMMC assessment and ensuring no gaps in business continuity when the deadline arrives." Optro, Crowe, and A-LIGN function as a coordinated CMMC ecosystem, each leading their own area of expertise: Crowe helps organizations interpret requirements, determine readiness for compliance certification, and build their program, Optro enables it through its AI-powered GRC platform, and A-LIGN validates it through the official assessment - creating a continuous, guided path to certification. "This alliance will help organizations to align people, processes, and technology as they work towards CMMC certification," said Adam Pajakowski, Business Process and Controls Partner at Crowe. "Together, we can help organizations define processes, enable technology, and meet compliance standards." "A-LIGN is one of the leading C3PAOs in the country, and we've seen firsthand how unprepared many organizations are for the rigor of a CMMC assessment," said Petar Besalev, EVP of Cybersecurity and Compliance at A-LIGN. "Getting ready before an assessment with GRC platforms and advisory partners like Optro and Crowe can set organizations up for a clear, coordinated route to prepare for certification." About Optro Optro (formerly AuditBoard) helps enterprises transform risk into opportunity, redefining GRC through an agentic system of action. More than 50% of the Fortune 500 trust Optro to elevate audit, risk, and compliance in addressing a new era of risk. Optro is top-rated by customers on G2 and was named a Leader in the 2025 Gartner(R) Magic Quadrant(TM) for Governance, Risk and Compliance (GRC) Tools, Assurance Leaders. To learn more, visit: optro.ai. SOURCE Optro, Inc This is a paid placement. For further inquiries, please contact PR Newswire directly.
Exostar, A-LIGN to help defense contractors with CMMC accreditation. * Exostar and A-LIGN partner to help defense contractors accelerate CMMC accreditation * Collaboration combines supply chain visibility with CMMC assessment capabilities * The 2026 Cyber Summit on May 21 will cover zero trust, AI in cyber defense and more As defense contractors navigate evolving CMMC requirements and supply chain cybersecurity challenges, government and industry leaders continue to focus on strategies that strengthen resilience across the defense industrial base. Attend the 2026 Cyber Summit on May 21 and join experts as they discuss zero trust, post-quantum cryptography, AI in cyber defense and more. Save your spot now! The companies said Tuesday the partnership combines Exostar's supply chain visibility and collaboration platforms with A-LIGN's capabilities as a CMMC third-party assessor organization, or C3PAO. According to the companies, the collaboration is intended to help prime contractors and suppliers address compliance requirements as CMMC standards become part of DOW contract solicitations and renewals. How will Exostar & A-LIGN help contractors with CMMC accreditation? According to the companies, the collaboration seeks to help prime contractors and suppliers address compliance requirements as CMMC standards become part of DOW contract solicitations and renewals. Under the partnership, Exostar will offer its Supplier Management and CMMC Ready Suite offerings, which are designed to provide visibility into supplier compliance status and support organizations preparing for and maintaining CMMC accreditation. A-LIGN will provide assessment services to support contractor certification efforts. The company said its teams conduct CMMC assessments at scale to help organizations move through the accreditation process. The companies said the partnership will help prime contractors identify supplier compliance shortcomings and support certification efforts across multi-tier supply chains. What did A-LIGN & Exostar leaders say about the partnership? A-LIGN CEO Scott Price said the partnership combines Exostar's supply chain visibility capabilities with A-LIGN's assessment expertise to help contractors strengthen compliance readiness and security efforts. "The partnership will help contractors drive readiness, strengthen security at scale, and position themselves for success," Price added. Exostar CEO Richard Addi said the company has focused on CMMC-related offerings since the cybersecurity program was introduced in 2019. "Partnering with A-LIGN complements our CMMC Ready Suite with the resources necessary to give our customers the direct, trusted accreditation assessment pathway imperative for primes and suppliers to protect and enhance their DoW revenue streams." In a LinkedIn post published Tuesday, Exostar Chief Revenue Officer Derrick Reig said streamlining CMMC compliance is an imperative for the defense industrial base and defense and aerospace sectors. He also described the partnership with A-LIGN as an example of the company's "Together We Thrive" approach. What recent cybersecurity efforts has Exostar supported? The partnership follows several recent cybersecurity and compliance developments involving Exostar. In December, Exostar achieved CMMC Maturity Level 2 certification, validating its compliance with all 110 controls under the National Institute of Standards and Technology's Special Publication 800-171 Revision 2. More recently, the company won a spot on the U.S. Army's Next-Gen Commercial Operations in Defended Enclaves, or NCODE, indefinite-delivery/indefinite-quantity contract vehicle. Introduced in 2024, the NCODE pilot program is designed to help small businesses within the defense industrial base improve cybersecurity and meet DOW's compliance requirements. is a staff writer at Executive Mosaic, where she writes for ExecutiveBiz about IT modernization, cybersecurity, space procurement and industry leaders' perspectives on government technology trends.