Senior Risk & Compliance Engineer

Summary

Join Instacart's Governance Risk and Compliance (GRC) team as a Senior Risk & Compliance Engineer. This impactful role involves identifying and mitigating technology and business risks across Security, Financial Systems and Platforms, and Privacy. You will safeguard Instacart's critical operations, data integrity, and regulatory compliance. Leveraging an engineering mindset, you'll innovate using automation and continuous improvement. The GRC team partners with various departments, emphasizing proactive problem-solving and collective accountability. You'll play a leading role in influencing Instacart’s GRC strategies and practices by designing, building, and optimizing risk-based controls. This remote position offers competitive compensation and benefits, including equity grants.

Requirements

• Have a strong technical foundation and a passion for modernizing risk and compliance practices
• BA/BS Degree in Computer Science, Engineering, Management Information Systems, or a related field (or equivalent practical experience)
• 5+ years of professional experience in Compliance Engineering, Big 4 Consulting/Auditing, GRC, Financial Systems, Security, and/or Privacy compliance within the technology industry
• Proven expertise in designing, implementing, and monitoring controls across technology domains (e.g., access management, change management, data security, privacy)
• Deep understanding of risk management principles, with the ability to effectively assess, prioritize, and mitigate risks
• Excellent verbal and written communication skills, as well as collaboration skills that influence stakeholders across teams and levels
• Demonstrated ability to lead cross-functional initiatives and thrive in a fast-paced, evolving environment

Responsibilities

• Design, build, consult, and optimize risk-based controls across Security, Financial Systems, and Privacy domains, focusing on automation and continuous monitoring
• Drive rationalization and standardization of controls across multiple compliance frameworks (e.g., SOX, SOC 2, PCI, HIPAA, Privacy regulations)
• Collaborate with Internal and External Audit teams to streamline audit processes, ensuring readiness and well-organized evidence
• Support the development and implementation of GRC tooling and automation to improve evidence collection, control monitoring, and reporting through scalable, efficient processes
• Build partnerships with Engineering, Product, Legal, and Finance teams to integrate compliance considerations into their workflows and foster a shared responsibility model
• Identify and address emerging risks with a deep understanding of Instacart’s business and technology landscape

Preferred Qualifications

• Familiarity with compliance automation solutions and GRC tools
• Experience with cloud platforms like AWS or GCP and modern development practices (e.g., DevOps, CI/CD)
• Expertise in mapping and identifying common controls across multiple compliance frameworks
• Relevant certifications such as CISA, CISM, CPA, CISSP, or equivalent
• Experience building data reconciliation or data quality monitoring solutions
• A proactive, forward-thinking approach with a passion for automating manual processes and tackling GRC challenges creatively

Benefits

• Highly market-competitive compensation and benefits
• Remote work
• New hire equity grant
• Annual refresh grants
• Base pay range: $165,000 — $214,000 CAD