Senior SOX Manager – IT

<div class="content-intro"><p><strong>We're transforming the grocery industry</strong></p> <p><span class="im">At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.</span></p> <p>Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.</p> <p><strong>Instacart is a Flex First team </strong></p> <p>There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. <a href="https://www.instacart.careers/flex-first" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://instacart.careers/remote/&amp;source=gmail&amp;ust=1651869232122000&amp;usg=AOvVaw37OlxP8hAKN7nq4YwHQH7e">Learn more about our flexible approach to where we work.</a></p></div><h2><strong>Overview</strong></h2> <p>We are looking for a highly skilled and detail-oriented Senior SOX Manager – IT, to lead and manage the execution of our IT General Controls (ITGC) and IT Automated Controls (ITAC) compliance activities as part of the company's SOX program. In this role, you will ensure the company's IT control environment supports an efficient and effective internal control framework to comply with Section 404 of the Sarbanes-Oxley Act (SOX).</p> <p>This is a leadership role ideal for an experienced IT compliance professional who thrives in a fast-paced, highly collaborative engineering environment. This is not a traditional audit role. It requires genuine curiosity about how engineering teams build and operate, and the ability to translate between two very different worlds. You are equally comfortable in a compliance conversation and an engineering standup — someone who can earn the trust of both auditors and engineers, challenge outdated control assumptions, and drive toward a more efficient and sustainable SOX program.</p> <p>About the Team: You will be part of the broader SOX Compliance and Controls team and work alongside professionals from accounting, finance, and IT, as well as external auditors. This collaborative and innovative team is focused on building a resilient compliance program to address operational, financial, and system-level risks while maintaining high standards for internal controls and governance.</p> <h2><strong>About the Job</strong></h2> <p>As the Senior SOX Manager – IT, you will own all IT related controls processes, including defining and optimizing IT controls over financial reporting (ICFR). You will take charge of maintaining compliance while proactively identifying risks and partnering with IT stakeholders to strengthen the control environment. Your contributions will directly impact the reliability of financial data and the compliance posture of the company.</p> <p>A defining feature of this role is close day-to-day partnership with Engineering- an aligned associate embedded within Engineering teams. You will work alongside this embedded team — leveraging their systems knowledge and Engineering relationships to design controls that are rigorous, right-sized, and operationally sustainable. You bring the compliance expertise; they bring the Engineering context. Together you bridge the gap between audit requirements and engineering reality.</p> <p>Key Responsibilities include:</p> <ul> <li>IT Controls Ownership:</li> <ul> <li>Lead the IT controls component of the SOX program, including managing the identification and evaluation of IT processes and risks.</li> <li>Design and assess IT controls to support ICFR, such as access management, change management, and IT operations controls.</li> </ul> <li>SOX Compliance:</li> <ul> <li>Ensure IT controls comply with SOX requirements while staying aligned with COSO and PCAOB standards.</li> <li>Work with IT and finance stakeholders to resolve control deficiencies and drive remediation efforts in a timely and efficient manner.</li> </ul> <li>Collaboration with IT and Audit Partners:</li> <ul> <li>Partner with IT teams to implement, document, and maintain effective IT controls.</li> <li>Collaborate with internal and external auditors to coordinate audit schedules, provide evidence, and address IT audit findings.</li> </ul> <li>Risk Management and Process Improvement:</li> <ul> <li>Perform periodic risk assessments related to IT processes and evaluate the impacts of system implementations or changes on the control environment.</li> <li>Identify opportunities to automate IT controls and improve process efficiency.</li> </ul> <li>Testing and Reporting:</li> <ul> <li>Oversee testing efforts for IT controls and collaborate on reporting outcomes to SOX leadership, executive management, and the Audit Committee.</li> <li>Provide recommendations to address identified issues and ensure robust controls are in place.</li> </ul> <li>Influence and Partnership:</li> <ul> <li>Operate as a subject matter expert and trusted compliance partner to Engineering-aligned associates, providing SOX guidance and coaching without direct management authority.</li> <li>Influence without authority — driving alignment, building trust, and moving the program forward across teams that do not report to you.</li> <li>Bring structure and rigor to a complex, cross-functional program — maintaining clear plans, owners, and timelines across Engineering, Finance, and external audit partners.</li> </ul> </ul> <p>&nbsp;</p> <h2><strong>About You</strong></h2> <h3><strong>Minimum Qualifications</strong></h3> <ul> <li>Bachelor's degree in Information Technology, Accounting, or a related field; relevant certifications such as CISA, CISSP, or CPA preferred.</li> <li>10+ years of experience in IT audit, SOX compliance, or risk management with a focus on IT controls, preferably in a publicly traded company or Big Four public accounting firm.</li> <li>Demonstrated expertise in identifying, designing, and testing IT controls to support compliance standards.</li> <li>Deep knowledge of SOX 404, COSO framework, COBIT principles, IT security, and risk management practices.</li> <li>Hands-on experience with IT controls domains including access management, change management, and disaster recovery.</li> <li>Proven ability to earn the trust of engineering teams and communicate technical risks and control concepts in plain language — to engineers, senior executives, and audit committees alike.</li> <li>Experience working in or alongside high-velocity engineering organizations at a technology company.</li> </ul> <p>&nbsp;</p> <h3><strong>Preferred Qualification