Google has criteria for domain hostage situations, so I'd say it depends on whether an employee used company funds to register it on behalf of the org.

It seems like a simple matter of providing internal communication about the domain that includes the approval to purchase to prove ownership.

If that doesn't exist, OP needs to mend some bridges, ask very nicely for a transfer, and be prepared to offer to buy the domain off its "owner".