Instacart
Senior Risk & Compliance Engineer
Job Description
We're transforming the grocery industry
At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.
Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.
Instacart is a Flex First team
There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.
Overview
About the Role -
Join Instacart's dynamic Governance Risk and Compliance (GRC) team as a Senior Risk & Compliance Engineer. In this impactful role, you will identify and mitigate technology and business risks across Security, Financial Systems and Platforms, and Privacy. Your work will help safeguard Instacart's critical operations, data integrity, and regulatory compliance. Leveraging an engineering mindset, you'll innovate beyond traditional compliance approaches, using automation and continuous improvement techniques to reduce risk while enhancing operational efficiency.
About the Team -
Our GRC team works within the Chief Information Security Organization (CISO), partnering closely with Security, Infrastructure and Product Engineering as well as cross-functional teams in Legal and Finance. Together, we tackle risks associated with data integrity, financial systems, security compliance, and privacy regulations. Guided by Instacart's values of collaboration and ownership, we take pride in fostering a "Go Far Together" spirit, emphasizing proactive problem-solving and collective accountability.
About the Job -
You’ll play a leading role in influencing Instacart’s GRC strategies and practices by:
- Designing, building, consulting and optimizing risk-based controls across Security, Financial Systems, and Privacy domains, with a focus on automation and continuous monitoring.
- Driving rationalization and standardization of controls across multiple compliance frameworks (e.g., SOX, SOC 2, PCI, HIPAA, Privacy regulations).
- Collaborating with Internal and External Audit teams to streamline audit processes, ensuring readiness and well-organized evidence.
- Supporting the development and implementation of GRC tooling and automation to improve evidence collection, control monitoring, and reporting through scalable, efficient processes.
- Building partnerships with Engineering, Product, Legal, and Finance teams to integrate compliance considerations into their workflows and foster a shared responsibility model.
- Identifying and addressing emerging risks with a deep understanding of Instacart’s business and technology landscape.
About You
You have a strong technical foundation and a passion for modernizing risk and compliance practices.
Minimum Qualifications
- BA/BS Degree in Computer Science, Engineering, Management Information Systems, or a related field (or equivalent practical experience).
- 5+ years of professional experience in Compliance Engineering, Big 4 Consulting/Auditing, GRC, Financial Systems, Security, and/or Privacy compliance within the technology industry.
- Proven expertise in designing, implementing, and monitoring controls across technology domains (e.g., access management, change management, data security, privacy).
- Deep understanding of risk management principles, with the ability to effectively assess, prioritize, and mitigate risks.
- Excellent verbal and written communication skills, as well as collaboration skills that influence stakeholders across teams and levels.
- Demonstrated ability to lead cross-functional initiatives and thrive in a fast-paced, evolving environment.
Preferred Qualifications
- Familiarity with compliance automation solutions and GRC tools.
- Experience with cloud platforms like AWS or GCP and modern development practices (e.g., DevOps, CI/CD).
- Expertise in mapping and identifying common controls across multiple compliance frameworks.
- Relevant certifications such as CISA, CISM, CPA, CISSP, or equivalent.
- Experience building data reconciliation or data quality monitoring solutions.
- A proactive, forward-thinking approach with a passion for automating manual processes and tackling GRC challenges creatively.
Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here.
Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here.
For US based candidates, the base pay ranges for a successful candidate are listed below.
Interested in this job?
Applications are no longer being accepted for this job.
Instacart
A grocery delivery service allowing users to order from local stores and have items delivered by personal shoppers.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.