Head of Internal Audit

About the Role

The Head of Internal Audit is responsible for establishing and overseeing the Internal Audit function. This role reports administratively to the CFO and functionally to the Chair of the Audit Committee, with frequent collaboration across cross-functional leadership to drive compliance, governance, and risk management within Instacart. The role focuses on leading the Internal Audit team, enhancing our existing Audit processes, and maintaining an Enterprise Risk Management Framework to support the company’s long-term business success.

About the Team

The Internal Audit team is responsible for ensuring governance, risk management, and compliance across the organization, while maintaining alignment with industry best practices and legal requirements. In addition to overseeing the team’s day-to-day operations, the Head of Internal Audit will set a strategic vision for the function and build, lead and mentor a high-performing internal audit team. Additionally, this individual will be responsible for ensuring the team builds close partnerships with key stakeholders, including senior leadership, external auditors, and the Audit Committee of the Board.

• Identify, assess, and monitor key risks and controls, refining the Internal Audit strategy to align with the company’s goals and a risk-informed perspective.
• Design and implement effective Internal Audit processes to enhance overall governance, risk management, and compliance.
• Assume ownership of existing audit plans while co-developing and executing future risk-based strategies by collaborating across departments to identify emerging risks, develop mitigation strategies, and drive compliance with regulatory and governance standards.
• Conduct and oversee internal audits that adhere to professional standards, ensuring quality, timelines, and appropriate documentation of financial and IT controls.  Develop actionable, cross-functionally aligned recommendations.
• Partner with legal to oversee Enterprise Risk Management, driving the Enterprise Risk Committee to evaluate and address top risks while maintaining the Enterprise Risk Management (ERM) Framework in line with best practices.
• Build and maintain strong relationships with senior leadership, the Audit Committee of the Board, external auditors, legal, and regulators to ensure effective decision-making and alignment.
• Oversee, mentor, and develop the Internal Audit team, with a focus on professional growth and optimized team performance.
• Leverage technology and data analytics, including AI, to enhance audit effectiveness, continuous monitoring and issue tracking.
• Ensure alignment with the International Professional Practices Framework (IIA standards) and remain informed of industry-leading practices

Minimum Qualifications 

• 15+ years of experience in auditing or compliance-related roles, with demonstrated leadership experience in Internal Audit, including leadership roles in public companies
• Experience operating within a SOX-compliant environment and expertise in assessing IT/technology and financial controls (6+ years).
• Deep expertise in Internal Audit standards, risk management, governance, and compliance.
• Demonstrated ability to drive change, navigate complex business landscapes, and engage with senior leaders and the board.
• Experience operating in a fast-paced, technology-driven environment.
• Bachelor’s degree in Finance, Accounting, Economics, IT, or a relevant field; advanced degree preferred.
• At least one relevant professional certification (e.g., CIA, CPA,, CISA, CISSP, or Chartered Accountant).

Preferred Qualifications

• Proven success in building and leading high-performing teams across diverse and dynamic environments, including prior experience building an internal audit function from the ground up
• Exceptional interpersonal, communication, analytical, and organizational abilities; proven track record of engaging credibly with senior management, legal counsel, the Board and external auditors in high stakes environments
• Experience with technology platforms or highly regulated industries, including IT risks, cybersecurity, and controls in evolving financial and technological contexts.
• Knowledge of enterprise risk management reporting frameworks.