Trust & Safety Senior Associate, Information Security Ops

Instacart

14h•Remote

About The Position

The InfoSec Ops Senior Associate will sit on Instacart’s InfoSec Ops team and report to the Trust & Safety manager over InfoSec Ops. You will collaborate cross-functionally with GRC, Security, Procurement, Legal, Engineering, and other stakeholders in this role. You must be able to operate independently and with a high degree of confidentiality. Instacart's Trust & Safety department takes data-driven, customer-first approaches to ensure we are compliant with all local, state, and federal regulations regarding grocery fulfillment. The InfoSec Ops team focuses on keeping Instacart’s data (and the systems it flows through) safe at scale, from vendor risk management to internal access controls and beyond. The InfoSec Ops Senior Associate will handle a variety of operational and program management tasks related to data privacy and information security. You will be responsible for handling cadenced tasks (e.g., daily/weekly), high-priority escalations, and some program management responsibilities. You will also take ownership of privacy and security readiness efforts for high-visibility launches. You will be expected to manage competing priorities across several different subject matter areas. We are looking for candidates with stellar written communication skills, business acumen, and a keen sense of situational awareness. You will need to navigate delicate situations with discretion and tact; as you develop in this role, you will be expected to understand when to under-communicate or over-communicate depending on the audience and situation. As a member of a small operational team supporting a program with company-wide impact, will take on project work to help the program continue to mature. You will surface ideas for projects and process improvements and drive them to fruition. You will be asked to take on data analysis tasks and metrics reporting.

Requirements

4+ years of experience within a Trust & Safety, risk, legal, or policy operations function, ideally one subject to legal, regulatory, or contractual obligations around sensitive data; 2+ years taking on elevated responsibilities within such an environment
Demonstrated ability to navigate ambiguity and show leadership on complex, high-visibility operational workflows
Track record of driving cross-functional projects to completion
Familiarity with information security and data privacy concepts and vocabulary
Stellar written and verbal communication skills, including the ability to convey complex privacy and security issues clearly to internal and external stakeholders
Composure and precision when operating in time-sensitive or business-critical situations
Working understanding of business metrics and reporting

Nice To Haves

Professional experience related to information security and data privacy operations, esp. vendor risk management operations
Familiarity with third party risk management frameworks
CIPP/CIPM or SEC+ certification is a big plus

Responsibilities

Evaluating vendors’ data collection practices and security postures; working with internal teams and vendor teams to understand the types of data each vendor would collect; communicating Instacart’s security and privacy requirements
Tracking and reporting metrics on InfoSec Ops initiatives
Assisting with large-scale audit readiness efforts
Organizing, coordinating, and tracking cross-functional privacy and security projects involving multiple stakeholder teams
Acting as the DRI representing Trust & Safety’s privacy and security operations teams in high-visibility company-wide initiatives, including expansions into new markets and product surfaces
Building and maintaining workflow documentation
Automating and monitoring recurring tasks using AI agents
Proactively coming up with ideas to improve operational efficiency
Identifying, tracking, and reporting success metrics