Information Security Manager

Union Square Hospitality Group (USHG) has created some of New York’s most beloved restaurants, cafes, and bars, which offer outstanding food delivered with our signature warmth and hospitality. Founded by Danny Meyer with the opening of Union Square Cafe in 1985, the company now extends beyond the walls of its eateries.

USHG has long supported its communities through hunger relief and civic organizations. USHG holds 28 James Beard Awards and numerous accolades for its distinctive style of hospitality.

Who you are:

The Information Security Manager plays a vital role in safeguarding the integrity of USHG’s IT infrastructure. This role involves continuously monitoring cybersecurity alerts and events across the security stack to identify, analyze, and escalate potential cyber threats, including emerging risks introduced by AI and generative AI tools. These threats may stem from external cybercriminals, malicious insiders, or unmanaged AI tool adoption, posing risks to critical infrastructure and sensitive data. Utilizing advanced security tools and thorough business process reviews, the Information Security Manager collaborates closely with the technology team, vendors, and business units to strengthen USHG’s security posture, including the governance of AI systems and tools used across the organization.

Specializing in key domains within cybersecurity, you provide both proactive and reactive support to detect, mitigate, and advise on security threats. Your expertise is crucial in ensuring the protection of USHG’s digital assets and in driving forward the organization’s security and AI governance initiatives.

What you’ll do:

• Consistently deliver a culture of Enlightened Hospitality to all stakeholders
• Monitor and analyze security events using a range of security tools and technologies to detect and respond to potential threats
• Investigate and address security incidents, conducting thorough root cause analysis and implementing effective threat mitigation strategies
• Conduct regular vulnerability assessments, penetration testing, and security audits to identify, evaluate, and remediate potential security risks and gaps
• Maintain security frameworks and lead compliance initiatives, including NIST, ISO 27001, and PCI DSS, with the expertise to effectively interpret and customize these standards to align with the organization’s specific needs
• Assess and govern the use of tools across the organization, maintaining and updating USHG’s risk profile against the NIST Framework and tracking tool adoption, usage, and residual risk
• Review application and software requests, including AI and generative AI integrations, classifying them by data sensitivity and risk, and confirming they meet security requirements
• Develop, implement, and maintain comprehensive security policies, procedures, and guidelines, including AI usage policy, to safeguard sensitive information and ensure compliance with industry standards
• Review and approve configurations for critical network components such as firewalls, IDS/IPS, VPN gateways, load balancers, WAFs, SSL certificates, and more
• Deliver targeted security awareness training to employees and stakeholders, fostering a culture of security mindfulness throughout the organization
• Collaborate closely with IT and other departments to seamlessly integrate security measures, including AI governance, across all business operations, ensuring a cohesive security strategy
• Prepare detailed reports and documentation to support security initiatives
• Stay informed of the latest security trends, emerging vulnerabilities, AI-related risks, and industry best practices, proactively enhancing USHG’s security posture

What we need from you:

• 5+ years of experience in a Security Operations Lead or Senior Security Analyst role
• Experience with security tools and technologies, including CrowdStrike, Proofpoint, Microsoft Defender, Okta, and Microsoft Entra ID preferred
• Strong understanding of cloud security, particularly AWS, identity and access management (IAM), and securing cloud infrastructure and applications
• Experience with vulnerability assessments, penetration testing, log analysis, network security technologies, protocols, and securing Windows, macOS, and Linux environments
• Familiarity with ITIL or similar change and project management frameworks, AI governance, and evaluating security and data risks associated with AI and generative AI tools; ability to stay current with evolving threats
• Strong critical thinking, data-driven decision-making, and communication skills, with the ability to influence business partners and clearly communicate security risks, CISSP, CISM, or other advanced security certifications highly desirable

What you’ll get from us:

At Union Square Hospitality Group, extending Enlightened Hospitality is at the heart of everything we do. We believe our people are our greatest ingredient. Joining our team means becoming part of a culture rooted in care, creativity, and growth. As an Information Security Manager, you’ll enjoy:

• Competitive pay: Annual compensation of $95,000 with eligibility for a bonus
• Comprehensive health coverage: Medical, dental, and vision insurance, plus flexible spending options for healthcare and dependent care
• Time to recharge: Generous paid time off and paid parental leave to support life outside of work
• Investing in your future: A matched 401(k) plan to help you grow long-term savings
• Peace of mind: Life insurance, employee assistance programs, and exclusive access to primary care, mental health, and other wellness services.
• Support in times of need: Access to the USHG HUGS Employee Relief Fund, offering direct assistance to team members facing unexpected hardship
• Hospitality perks: Annual dining credit and a 51% dining discount across the entire USHG family of restaurants
• Convenience & flexibility: Pre-tax commuter benefits for transit and parking
• Growth and community: Opportunities for learning, mentorship, and collaboration with some of the most passionate people in hospitality.

Putting Enlightened Hospitality into Practice

Integral to our culture are our six behaviors. Our behaviors guide how we work together.

• We play to win with humble swagger. Hospitality is a team sport where everyone deserves an opportunity to thrive and belong
• Turn over the rocks and always be connecting dots to build uplifting experiences and relationships
• Center the salt shaker with an unwavering commitment to excellence and the values that matter most
• Write a great next chapter. The road to success is paved with mistakes well-handled
• Bring a charitable assumption and err on the side of generosity
• Leave our campsite better than we found it; always responsible for the impact of our wake

*The above represents the expected salary range for this position. Ultimately, in determining your pay, we'll consider your experience and other job-related factors.

The responsibilities outlined above are not exhaustive. This role may be required to take on other duties or projects as necessary to support organizational goals, in alignment with their skills, experience, and the evolving needs of the business.