We're transforming the grocery industry
At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.
Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.
Instacart is a Flex First team
There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work.
We are seeking a Senior SOX Manager to lead enterprise-wide programs focused on SOX compliance, IT controls, and controls transformation across modern technology environments.
This role sits at the intersection of technical program management, digital risk, and engineering, requiring the ability to translate complex system architectures into scalable, audit-ready control frameworks. The Senior SOX Manager will own program strategy and execution, driving alignment across Engineering, Finance, Data, and Audit stakeholders to deliver automated, efficient, and sustainable control environments.
What you'll cook up in your first yearProgram Strategy & Execution
- Lead end-to-end SOX programs, including planning, execution, and delivery across ITGCs, ITACs, and key business process controls
- Drive risk assessments, control scoping, testing, deficiency evaluation, and remediation
- Define program roadmaps, milestones, and success metrics, ensuring alignment with compliance and audit requirements
- Coordinate with Internal Audit and external auditors to support audit readiness and reliance
- Lead complex, cross-functional programs spanning multiple systems, teams, and business domains
- Own program execution end-to-end, including dependency management, risk mitigation, and deficiencytracking
- Operate as the single-threaded owner for program outcomes across technology, engineering, data and finance stakeholders
- Translate ambiguous technical and regulatory requirements into structured execution plans
- Drive implementation of controls across modern technology environments, including:
- Cloud native architectures
- Cloud platforms (e.g., AWS, Azure, GCP)
- Distributed systems and microservices architectures
- API-driven and event-based systems
- Address risks related to:
- Dynamic infrastructure and environment provisioning
- Configuration management and system inconsistencies
- Partner with engineering teams to embed controls within system design and architecture decisions
- Embed controls across the software development lifecycle (SDLC), including:
- Code repositories and access controls
- CI/CD pipelines and deployment governance
- Environment segregation (dev, test, prod)
- Promote “compliance-by-design” and “compliance-as-code” approaches
- Ensure controls are implemented with minimal friction to engineering workflows
- Lead programs to implement controls across data platforms and financial reporting pipelines, including:
- Data ingestion, transformation, and reporting layers
- Reconciliations between source systems and reporting outputs
- Ensure controls support:
- Data completeness, accuracy, and lineage
- Reliable and auditable financial reporting datasets
- Oversee controls across key financial processes, including:
- Order-to-cash
- Revenue recognition
- Payments, adjustments, and reconciliations
- Address risks in high-volume, system-driven transaction environments
- Drive implementation of end-to-end reconciliation and completeness controls across systems
- Drive adoption of:
- Automated control testing frameworks
- Continuous controls monitoring (CCM) solutions
- Data analytics to enhance control effectiveness
- Reduce reliance on manual, point-in-time controls by enabling scalable, real-time assurance models
- Lead material weakness and control deficiency remediation programs
- Define and execute future-state control frameworks aligned to scalable, technology-enabled environments
- Drive transformation from:
- Fragmented/manual controls → integrated, automated control ecosystems
- Develop executive-ready program updates, dashboards, and risk summaries
- Translate technical control gaps into:
- Financial reporting impact
- Business and audit implications
- Support SteerCo and Audit Committee communications
The secret ingredients we're looking for
- Technical program leadership – drives execution across complex, multi-system initiatives
- Architecture fluency – understands system design, data flows, and control points
- Risk translation – connects technology risks to financial and compliance impact
- Automation mindset – prioritizes scalable, low-touch control solutions
- Executive communication – distills complexity into clear, actionable insights
- 8–12+ years in:
- Technical Program Management, IT SOX, IT Audit, or Risk Consulting
- Experience leading large-scale, cross-functional technology programs end-to-end
- Experience in SOX-regulated or highly controlled environments
- Ability to connect technical architecture with financial controls and risk outcomes
- Technical Expertise
- Strong knowledge of:
- SOX, COSO, ICFR
- ITGCs (access, change management, operations)
- ITACs and automated controls
- Familiarity with:
- Cloud platforms and modern application architectures
- Data platforms and reporting environments
- SDLC processes and DevOps practices
- Advanced degree (MBA, MIS, or equivalent) is a plus.
- Experience managing IT SOX efforts for ERP systems such as Oracle, SAP, or Workday.
- Familiarity with cloud-based environments (AWS, Azure, GCP) and related control implications.
- Prior experience in an embedded or liaison role between compliance and engineering functions.
- Strong project management and organizational skills with a results-oriented approach.
#LI-Remote
Instacart provides highly market-competitive compensation and benefits in each location where our employees work. This role is remote and the base pay range for a successful candidate is dependent on their permanent work location. Please review our Flex First remote work policy here.
Offers may vary based on many factors, such as candidate experience and skills required for the role. Additionally, this role is eligible for a new hire equity grant as well as annual refresh grants. Please read more about our benefits offerings here.
For US based candidates, the base pay ranges for a successful candidate are listed below.
Similar Jobs
What you need to know about the Charlotte Tech Scene
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
