Information Security Manager

USHG; Curitiba; On-site; BRL 467,000 - 571,000; Full time

Benefits offered by this job

Health coverage

Time off & parental leave

401(k) plan matching

Life insurance

Employee assistance programs

Dining discount across USHG

Pre-tax commuter benefits

Job summary

Union Square Hospitality Group (USHG) is seeking an Information Security Manager to safeguard our IT infrastructure across the organization. You will monitor security alerts, analyze events, and lead threat response with a focus on AI governance and risk management.

You will collaborate with technology teams, vendors, and business units to strengthen security posture, drive compliance with NIST, ISO 27001, and PCI DSS, and guide risk assessments.

Qualifications

• 5+ years of experience in a Security Operations Lead or Senior Security Analyst role.
• Experience with security tools including CrowdStrike, Proofpoint, Microsoft Defender, Okta, and Microsoft Entra ID.
• Strong understanding of cloud security, particularly AWS, IAM, and securing cloud infra and apps.
• Experience with vulnerability assessments, pen testing, log analysis, and securing Windows, macOS, and Linux.
• Familiarity with ITIL or similar frameworks, AI governance, and evaluating security risks related to AI.
• CISSP, CISM, or other advanced security certifications desirable.

Responsibilities

• Deliver a culture of Enlightened Hospitality to stakeholders.
• Monitor and analyze security events with tools to detect threats.
• Investigate incidents, perform root cause analysis, and mitigate threats.
• Conduct vulnerability assessments, penetration testing, and security audits.
• Lead security governance and compliance with NIST, ISO 27001, PCI DSS.
• Govern use of tools, track risk per NIST framework, monitor AI tool adoption.
• Review AI/generative AI integrations for data sensitivity and risk.
• Develop and maintain security policies, including AI usage policies.
• Review configurations for firewalls, IDS/IPS, VPN, WAF, SSL certs.
• Provide security awareness training to employees and partners.
• Collaborate with IT and other departments to integrate security measures.

Skills

Security monitoring

Threat detection

Incident response

Cloud security

Security governance

Education

CISSP or CISM desirable

Tools

CrowdStrike

Proofpoint

Microsoft Defender

Okta

Microsoft Entra ID

Job description

If you are a job seeker with a disability and require a reasonable accommodation to apply for one of our jobs, you will find the contact information to request the appropriate accommodation by visiting the following our Accessibility Accomodation for Applicants page.

Information Security Manager

• Posted on November 4, 2026

Locations

Showing 1 location

USHG Home Office
853 Broadway
17th Fl
New York, NY 10003, USA

• Manager
• Full-Time
• Requisition #: INFOR009989

Description

Union Square Hospitality Group (USHG) has created some of New York’s most beloved restaurants, cafes, and bars, which offer outstanding food delivered with our signature warmth and hospitality. Founded by Danny Meyer with the opening of Union Square Cafe in 1985, the company now extends beyond the walls of its eateries.

USHG has long supported its communities through hunger relief and civic organizations. USHG holds 28 James Beard Awards and numerous accolades for its distinctive style of hospitality.

Who you are:

The Information Security Manager plays a vital role in safeguarding the integrity of USHG’s IT infrastructure. This role involves continuously monitoring cybersecurity alerts and events across the security stack to identify, analyze, and elevate potential cyber threats, including emerging risks introduced by AI and generative AI tools. These threats may stem from external cybercriminals, malicious insiders, or unmanaged AI tool adoption, posing risks to critical infrastructure and sensitive data. Utilizing advanced security tools and thorough business process reviews, the Information Security Manager collaborates closely with the technology team, vendors, and business units to strengthen USHG’s security posture, including the governance of AI systems and tools used across the organization.

Specializing in key domains within cybersecurity, you provide both proactive and reactive support to detect, mitigate, and advise on security threats. Your expertise is crucial in ensuring the protection of USHG’s digital assets and in driving forward the organization’s security and AI governance initiatives.

What you’ll do:

• Consistently deliver a culture of Enlightened Hospitality to all stakeholders
• Monitor and analyze security events using a range of security tools and technologies to detect and respond to potential threats
• Investigate and address security incidents, conducting thorough root cause analysis and implementing effective threat mitigation strategies
• Conduct regular vulnerability assessments, penetration testing, and security audits to identify, evaluate, and remediate potential security risks and gaps
• Maintain security frameworks and lead compliance initiatives, including NIST, ISO 27001, and PCI DSS, with the expertise to effectively interpret and customize these standards to align with the organization’s specific needs
• Assess and govern the use of tools across the organization, maintaining and updating USHG’s risk profile against the NIST Framework and tracking tool adoption, usage, and residual risk
• Review application and software requests, including AI and generative AI integrations, classifying them by data sensitivity and risk, and confirming they meet security requirements
• Develop, implement, and maintain comprehensive security policies, procedures, and guidelines, including AI usage policy, to safeguard sensitive information and ensure compliance with industry standards
• Review and approve configurations for critical network components such as firewalls, IDS/IPS, VPN gateways, load balancers, WAFs, SSL certificates, and more
• Deliver targeted security awareness training to employees and stakeholders, fostering a culture of security mindfulness throughout the organization
• Collaborate closely with IT and other departments to seamlessly integrate security measures, including AI governance, across all business operations, ensuring a cohesive security strategy
• Prepare detailed reports and documentation to support security initiatives
• Stay informed of the latest security trends, emerging vulnerabilities, AI-related risks, and industry best practices, proactively enhancing USHG’s security posture

What we need from you:

• 5+ years of experience in a Security Operations Lead or Senior Security Analyst role
• Experience with security tools and technologies, including CrowdStrike, Proofpoint, Microsoft Defender, Okta, and Microsoft Entra ID preferred
• Strong understanding of cloud security, particularly AWS, identity and access management (IAM), and securing cloud infrastructure and applications
• Experience with vulnerability assessments, penetration testing, log analysis, network security technologies, protocols, and securing Windows, macOS, and Linux environments
• Familiarity with ITIL or similar change and project management frameworks, AI governance, and evaluating security and data risks associated with AI and generative AI tools; ability to stay current with evolving threats
• Strong critical thinking, data-driven decision-making, and communication skills, with the ability to influence business partners and clearly communicate security risks, CISSP, CISM, or other advanced security certifications highly desirable

What you’ll get from us:

At Union Square Hospitality Group, extending Enlightened Hospitality is at the heart of everything we do. We believe our people are our greatest ingredient. Joining our team means becoming part of a culture rooted in care, creativity, and growth. As an Information Security Manager, you’ll enjoy:

• Competitive pay: Annual compensation of $95,000 with eligibility for a bonus
• Comprehensive health coverage:Medical, dental, and vision insurance, plus flexible spending options for healthcare and dependent care
• Time to recharge:Generous paid time off and paid parental leave to support life outside of work
• Investing in your future:A matched 401(k) plan to help you grow long-term savings
• Peace of mind:Life insurance, employeeassistanceprograms, and exclusive access to primary care, mental health, and other wellness services.
• Support in times of need:Access to the USHG HUGS Employee Relief Fund, offering directassistanceto team members facing unexpected hardship
• Hospitalityperks:Annual dining credit and a 51% dining discount across the entire USHG family of restaurants
• Convenience & flexibility:Pre-tax commuter benefits for transit and parking
• Growth and community:Opportunities for learning, mentorship, and collaboration with some of the most passionate people in hospitality.

Putting Enlightened Hospitality into Practice

Integral to our culture are our six behaviors. Ourbehaviors guidehow we work together.

• We play to win withhumbleswagger.Hospitality is a team sport where everyone deserves an opportunity to thrive and belong
• Turn over the rocks and alwaysbe connectingdotsto build uplifting experiences and relationships
• Center thesalt shakerwith an unwavering commitment to excellence and the values that matter most
• Write a great next chapter.The road to success is paved withmistakes well-handled
• Bring a charitable assumptionand err on the side of generosity
• Leave our campsite better than we found it;always responsible for the impact of our wake

*The aboverepresentsthe expected salary range for this position.Ultimately, indeterminingyour pay,we'llconsider your experience and other job-related factors.

The responsibilities outlined above are not exhaustive. This role may berequiredto take on other duties or projects as necessary to support organizational goals, in alignment with their skills, experience, and the evolving needs of the business.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.