Overview
About the Role
The InfoSec Ops Senior Associate will sit on Instacart’s InfoSec Ops team and report to the Law Enforcement Response and InfoSec Ops lead. You will collaborate cross-functionally with Security, Procurement, Legal, Engineering, and other stakeholders in this role. You must be able to operate independently and with a high degree of confidentiality.
About the Team
Instacart's Trust & Safety department takes data-driven, customer-first approaches to ensure we are compliant with all local, state, and federal regulations regarding grocery fulfillment. The InfoSec Ops team focuses on keeping Instacart’s data (and the systems it flows through) safe at scale, from vendor risk management to internal access controls and beyond.
About the Job
The InfoSec Ops Senior Associate will handle a variety of operational and program management tasks related to data privacy and information security. You will be responsible for handling cadenced tasks (e.g., daily/weekly) and high-priority escalations; you will also support the Lead by taking on program management responsibilities. You will be expected to manage competing priorities across several different subject matter areas.
Your operational responsibilities will include:
- Evaluating vendors’ data collection practices and security postures; working with internal teams and vendor teams to understand the types of data each vendor would collect; communicating Instacart’s security and privacy requirements.
- Investigating potential organizational security risks flagged by internal teams; communicating findings to high-level stakeholders.
- Tracking and reporting metrics on InfoSec Ops initiatives.
- Assisting with large-scale tooling access reviews via Jira.
- Organizing, coordinating, and tracking cross-functional privacy and security efforts involving multiple stakeholder teams.
Your program management responsibilities will include:
- Working with SMEs to understand InfoSec workflows and building out scalable operational processes.
- Building and maintaining workflow documentation.
- Identifying, tracking, and reporting success metrics.
We are looking for candidates with stellar written communication skills, business acumen, and a keen sense of situational awareness. You will need to navigate delicate situations with discretion and tact; as you develop in this role, you will be expected to understand when to under-communicate or over-communicate depending on the audience and situation.
As an early hire on Instacart’s InfoSec Operations team, you will take on project work to help the program continue to scale. You will surface ideas for projects and process improvements and drive them to fruition. You will be asked to take on data analysis tasks and metrics reporting.
About You
Minimum Qualifications
- Professional experience related to information security and data privacy operations
- Familiarity with issues and vocabulary related to information security and data privacy
- Stellar written and verbal communication skills. Ability to communicate about complex, nuanced privacy and security issues to internal and external stakeholders in time-sensitive, business-critical, and potentially high-visibility situations; ability to navigate these situations in a calm, meticulous, detail-oriented manner
- Comfortable using Google Drive, Jira, and Slack to collaborate with colleagues
- Comfortable with basic data analysis using Excel or Google Sheets
- Working understanding of business metrics and reporting
Preferred Qualifications
- Professional experience with vendor risk management operations
- CIPP/CIPM or SEC+ certification is a big plus
