---
title: 'Public Sector Staff Consultant at A-LIGN External'
canonical: 'https://feeny.ai/job/public-sector-staff-consultant-a-lign-external-sofia-mt4qrtmw48ys'
type: 'job'
last_seen: '2026-09-07'
---

# Public Sector Staff Consultant at A-LIGN External

- **Company:** A-LIGN External
- **Location:** Sofia, Bulgaria
- **Work type:** hybrid
- **Posted:** 2026-05-27
- **Last confirmed live:** 2026-09-07
- **Apply:** https://job-boards.greenhouse.io/align/jobs/8564505002

## Job description

## About the Role

Public Sector Staff Consultants are leaders in NIST cybersecurity framework who perform assessments for cloud computing technologies in meeting US federal compliance. In this role you will become an expert in with the DOD Cybersecurity Maturity Model Certification (CMMC).

Success in this position, requires a strong understanding of IT security-related system controls and of the various testing methods used to ascertain control effectiveness. You will work in a team atmosphere with an experienced Manager, and you’ll be assigned technical engagements to support and ensure client-ready deliverables are provided.

Reports to

Managing Consultant

Pay Classification

Full-Time

## Responsibilities

- Perform audit testing in accordance with NIST SP 800-171, CMMC Level 1 and Level 2 Assessment Guide, and other authoritative IT security guidance
- Validate information system security plans to ensure NIST control requirements are met
- Assist in development of Security Authorization Packages and ensure completeness and compliance with CMMC requirements and other authoritative IT security guidance
- Collaborate across multiple internal teams to ensure successful delivery of results based on scope of work
- Prepare agendas (e.g. planning, fieldwork, closing, etc.) and request lists
- Lead client meetings and maintain client relationships
- Monitor evidence collection process
- Review evidence and provide feedback to clients
- Address and respond to client questions
- Document evidence in supporting audit leadsheets and workbooks
- Communicate engagement status to management, including escalating any potential issues

## Minimum Qualifications

## EDUCATION

- Bachelor’s degree in management information systems, information security, computer science, or relevant discipline; or combination of relevant education and work experience
- Master’s degree is a plus

## EXPERIENCE

- Familiarity with any of the following Security Frameworks (NIST, ISO, COBIT, HIPAA/HITECH, etc.) required
- Experience with US government compliance, including FISMA, FedRAMP, RMF, and CSF preferred

## CERTIFICATIONS

- Working towards any of the following: CMMC CCP, CISA, CISSP, or other relevant certifications (e.g. CIPT, CCSK, etc.).

## SKILLS

- Ability to meet deadlines with a high degree of motivation working in a fast-paced environment
- Ability to lead multiple assessment engagements
- Excellent communication skills to include the ability to explain technical matters to a non-technical audience
- Broad IT background with technical understanding of networks, protocols, security configurations, cryptography, identity and access management, and the systems development life cycle

## Benefits

- Healthcare, Dental, and Vision Benefits
- EAP - Employee Assistance Program
- Competitive Bonus Structure
- Home Office Reimbursement
- Technology Allowance
- Certification Reimbursement
- Public Transportation Card
- Multisport Card
- Personalized Career Coaching
- Generous Paid Time Off
- Paid Office Closure December 24-January 1
- Summer Hours

## About A-LIGN

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com

Come Work for A-LIGN!

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on [LinkedIn](https://www.linkedin.com/company/a-lign/posts/?feedView=all).

A-LIGN is an Equal Opportunity Employer.

The personal data you provide to us is processed by A-LIGN Bulgaria. Your personal data is shared with employees of A-LIGN, and the candidate data retention period is 6 months. You have the right to obtain information about the processing of your personal data. In addition, you have the right to correct, to block, and to delete your data in accordance with the local laws and regulations. For more information you can visit [A-LIGN’s Job Ads Privacy Policy.](https://www.a-lign.com/privacy-policy-job-ads)

## About A-LIGN External

## Company Overview
- **One-liner**: A-LIGN is a technology-enabled security and compliance partner that helps organizations navigate cybersecurity risks through auditing, certification, and managed compliance services.
- **Entity Type**: Private (funding stage not disclosed)
- **Headquarters**: Tampa, Florida, United States (with additional offices in London, Galway, Panama City, Sofia, and Gurugram)
- **Founded**: 2009
- **Founders**: Not publicly available

## Core Business
- **Primary industry/industries**: Cybersecurity, Compliance, Audit, Risk Management
- **Target customers**: B2B – startups to global enterprises; heavily focused on regulated industries (tech, healthcare, government, finance)
- **Mission or purpose statement**: “Help companies like yours navigate the complexities of cybersecurity and compliance by offering customized solutions that align specifically with each organization's unique goals and objectives.” [a-lign.com](https://www.a-lign.com/about)

## Products & Services
- **SOC 1 and SOC 2 Audits**: Licensed auditor for System and Organization Controls reports.
- **ISO 27001 / 27701 / 22301 Certifications**: Accredited certification body for information security, privacy, and business continuity.
- **HITRUST CSF Assessment**: HITRUST CSF Assessor Firm.
- **FedRAMP**: Accredited 3PAO for cloud service provider authorizations.
- **CMMC (Cybersecurity Maturity Model Certification)**: C3PAO for defense supply chain compliance.
- **PCI DSS**: Qualified Security Assessor Company.
- **A-SCEND Platform**: Proprietary compliance management platform for evidence collection, audit tracking, and reporting.
- **Penetration Testing & Ransomware Preparedness**: Additional security testing services.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total funding not disclosed; key operational metrics include 6,400+ clients globally, 36,000+ audits completed, and 400+ auditors [a-lign.com](https://www.a-lign.com/).
- **Notable Investors/Partners**: Not publicly listed; partners with leading GRC automation tools (e.g., compliance automation providers) [a-lign.com](https://www.a-lign.com/).
- **Growth Signals**: Offices across 6 countries; recognized as #1 Top SOC 2 report issuer and Top 3 FedRAMP assessor; 96% customer satisfaction rating; expanded services to include CMMC and FedRAMP.

## Competitive Advantages
- **Single-provider model**: Offers the widest breadth of compliance frameworks (SOC, ISO, HITRUST, FedRAMP, PCI, CMMC) under one roof, reducing vendor fragmentation.
- **Proprietary technology**: A-SCEND platform streamlines audit evidence collection and communication.
- **Scale and reputation**: Largest issuer of SOC 2 and HITRUST reports; top FedRAMP assessor; trusted by thousands of organizations.
- **Quality focus**: 24-hour response time and high customer satisfaction (96%).

## Strategic Focus
- **Current priorities**: Continuing to expand global presence, deepening FedRAMP and CMMC capabilities, and enhancing the A-SCEND platform to further automate compliance workflows.
- **Direction for growth**: Pursuing new markets (government, healthcare, defense) and scaling the auditor workforce to meet demand.

## Why Work Here
- **Culture**: Emphasizes human connection, quality, integrity, and innovation. Core values: “Be all in”, “Commit to quality”, “Do the right thing”, “Innovate constantly”. Annual company event called CLIMB.
- **Workplace flexibility**: Multiple global locations; home office reimbursement suggests hybrid/remote options are available for some roles.
- **Benefits**: Healthcare/dental/vision, employer-paid life and disability insurance, 401(k) with match, generous PTO (including paid office closure Dec 25–Jan 1), summer hours, certification reimbursement, personalized career coaching, and access to A-LIGN University for continuous learning.
- **Diversity & Inclusion**: Prioritizes DEI; encourages individuals from all backgrounds to apply.
- **Career growth**: Opportunities to move between cybersecurity, audit, and operations tracks; sponsorship for certifications like CISA, CISSP, CEH.

## Sources
1. [a-lign.com/about](https://www.a-lign.com/about)
2. [a-lign.com/](https://www.a-lign.com/)
3. [a-lign.com/careers](https://www.a-lign.com/careers)
4. [linkedin.com/company/a-lign](https://www.linkedin.com/company/a-lign)
5. [boards.greenhouse.io/align](https://boards.greenhouse.io/align)

## Other roles at A-LIGN External

- [Account Executive, Expansion - Enterprise](https://feeny.ai/job/account-executive-expansion-enterprise-a-lign-external-united-states-d9kq1wj5mmhz) — United States
- [Account Executive, Expansion - Mid Market](https://feeny.ai/job/account-executive-expansion-mid-market-a-lign-external-united-states-btsw8p3dtbep) — United States
- [Associate Director of Strategic Programs](https://feeny.ai/job/associate-director-of-strategic-programs-a-lign-external-united-states-40x5wbjcg5fv) — United States
- [Business Development Representative Intern](https://feeny.ai/job/business-development-representative-intern-a-lign-external-tampa-crd1ws4756gr) — Tampa, United States
- [IT Auditor - SOC](https://feeny.ai/job/it-auditor-soc-a-lign-external-gurgaon-3dhn125mdvqa) — Gurgaon, India
- [Panama Director of Operations](https://feeny.ai/job/panama-director-of-operations-a-lign-external-panama-city-9credhhr56az) — Panama City, Panama
- [Talent Acquisition Professional](https://feeny.ai/job/talent-acquisition-professional-a-lign-external-sofia-q29jfdsm2jr4) — Sofia, Bulgaria
- [Junior AR Coordinator](https://feeny.ai/job/junior-ar-coordinator-a-lign-external-sofia-xt8x8jjv9203) — Sofia, Bulgaria
- [Strategy and Business Operations Analyst](https://feeny.ai/job/strategy-and-business-operations-analyst-a-lign-external-united-states-5eq45mv20eqw) — United States
- [ISO Staff Consultant](https://feeny.ai/job/iso-staff-consultant-a-lign-external-panama-city-w0j2h75jvhk2) — Panama City, Panama