Director IT, Internal Audit

Why this role is on the menu:

Instacart is building a best-in-class Internal Audit function from the ground up, and this role is central to it. This leader would add the structure, rigor, and technical depth required to deliver risk-based IT audit engagements at executive-quality standards.

Reporting directly to the Head of Internal Audit, this Director will own end-to-end IT audit delivery while building the function's technology capability and strategic priorities.

This role is for a seasoned Internal Audit professional who combines deep technical judgment with strong business acumen, excellent communication skills, a collaborative approach, and the drive to build something meaningful.

What you'll cook up in your first year:

Audit Delivery & Reporting:

• IT audit and advisory engagements are delivered end-to-end with executive-quality standards, clear ownership, and defensible scope.
• Independent audit judgment is applied consistently across engagements. Scope is calibrated to actual risk exposure, root cause analysis is rigorous, and conclusions are well-evidenced — not driven by checkbox compliance.
• Risk and control frameworks are applied with sound judgment, and findings are translated into clear, actionable narratives that resonate with both technical and non-technical audiences.
• Hands-on expertise with cloud and data platforms — including AWS, GCP, Datadog, and Okta — is applied to assess controls and design practical, effective solutions across key environments.

Team Leadership & Development:

• A high-performing audit team is developed through structured coaching, clear expectations, and tailored development plans, with a culture of excellence, continuous learning, and proactive problem-solving taking hold.

AI, Technology & Innovation:

• AI risk and governance considerations — including GenAI and agentic AI model risk, bias, transparency, and data privacy — are integrated into the audit approach.
• AI-enabled tools and data analytics are adopted to expand coverage, improve efficiency, and enhance audit impact.

Tools & Process Improvement:

• The Workiva platform is fully implemented and administered, anchoring the function's first-time build of a risk-based Internal Audit operating model aligned to IIA Standards.
• Controls are streamlined, manual effort is reduced, and operational efficiency across the audit function improves.

Stakeholder Partnerships:

• Productive relationships are built and maintained with business leaders and cross-functional partners — including Finance, Legal, ERM, Compliance, IT, Engineering, and Security — to implement scalable controls.
• This role serves as a trusted advisor across technology and data teams, shaping audit approaches for complex, AI-driven environments.

The secret ingredients we're looking for:

Must-have pantry staples (Minimum Qualifications):

• 12-15 years of progressive professional experience, with at least 5 years in a leadership role overseeing IT risk-based audits at a high-growth, global company.
• Demonstrated experience building a risk-based Internal Audit function from the ground up, with working knowledge of IIA Standards and the ability to apply them in practice.
• Track record of delivering risk-based audits in a fast-paced, agile technology environment with competing priorities and evolving risk landscapes.
• Exceptional written communication skills. Able to produce executive-quality audit reports with minimal revision and translate complex technical findings into clear, actionable narratives.
• Collaborative, relationship-oriented approach with the ability to influence and partner effectively across all levels of the organization.
• Translate deep technical expertise into impactful, actionable insights that resonate with both technical and non-technical audiences.

Optional garnishes (Preferred Qualifications):

• CISA, CRISC, or CIA certification. One or more of these designations is strongly preferred for this role.