You COULD just turn the Mac off.
Boot to an external macOS installer.
Erase the internal drive. That will remove everything, encrypted or not.
Then reinstall macOS. When the system reboots, and you get the new user setup, just choose to shut down from the menu. That will leave a completely fresh install, and the new owner can continue on with the new user setup.
Sophos SafeGuard uses FileVault 2 as the basis for its Mac support, so would be the same.
From Sophos system requirements page:
SafeGuard Disk Encryption for Mac as of version 6.10 builds on Mac OS X's integrated FileVault 2 encryption technology. It uses FileVault 2 to encrypt the entire hard disk, so that your data is safe even if the computer is lost or stolen.