Date: 14 hours ago
City: Lexington, Kentucky
Contract type: Full time

Galls, LLC is the largest and fastest growing supplier of uniforms and equipment to public safety professionals with a national presence in more than 80 locations across the nation. With over 50 years in the industry, it is easy to see why. We are PROUD to Serve America’s public safety professionals by providing the broadest selection of uniforms, equipment and solutions combined with great customer service.
Job Summary
The IT Security Administrator will provide vision and leadership related to cyber and information security initiatives and serve as the point person for the Galls cybersecurity system. The Administrator will lead evolving and strengthening the current information and cyber security program through the planning and implementing the most current policies, procedures, activities, and standards.
What You’ll Do
Job Summary
The IT Security Administrator will provide vision and leadership related to cyber and information security initiatives and serve as the point person for the Galls cybersecurity system. The Administrator will lead evolving and strengthening the current information and cyber security program through the planning and implementing the most current policies, procedures, activities, and standards.
What You’ll Do
- Develop, implement, maintain, and oversee enforcement of information and cyber security policies, procedures, and associated plans for system security administration and user system access leveraging industry-standard best practices and frameworks.
- Demonstrated approach to staying up to date with emerging technology, cyber, and information security trends as well as the landscape of emerging threats to make appropriate adjustments within the cyber security program, preferably in an omnichannel retail environment.
- Broad and deep understanding of information security controls, how controls are used to detect and respond to events & incidents, how controls impact the business and how control gaps can be mitigated/remediated.
- Apply knowledge of information security, cyber security, and privacy best practices, regulations, rules, and standards (e.g., CMMC, GDPR, PCI, CPRA).
- Define and communicate corporate plans, procedures, policies, and standards for the organization for acquiring, implementing, and operating current and new security systems, equipment, software, and other technologies.
- Work with Information Technology to fully secure e-commerce platforms, information, computer, network, and processing systems.
- Collaborate with Legal, Compliance, and HR to establish and maintain a system for ensuring that internal and external client information security and privacy policies are met.
- Where necessary, supervise recruitment, development, retention, and organization of security staff following corporate budgetary objectives and personnel policies
- Lead pen testing, audit, incident management process and response and, for all, establish appropriate standards and controls.
- Present and provide updates to the Executive Leadership Team (ELT) to communicate awareness of current and emerging threats, cyber and information security maturity, and goals.
- Remain informed on trends and issues in the cyber and information security industry, including current and emerging relative importance.
- Drive enterprise Security Awareness Training Program
- Deep understanding of eCommerce security threats, including, but not limited to, online financial frauds, DoS & DDoS attacks, malware, SQL injection, cross-site scripting, bots, and e-skimming tactics and experience leading the prevention as well as post-attack elimination of those threats.
- Requires BS Degree (or equivalent experience) in a Cyber Security, Information Technology, or Computer Science field and/or a minimum of 3-5 years experience in cyber and information security programs, security operations, and incident response.
- Excellent written and verbal communications skills with experience presenting to executives and leadership teams effectively communicating complicated security concepts.
- Certifications as a Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or other similar credentials.
- Experience working in omnichannel global retail organizations is preferred.
- US Citizenship or permanent residency is required.
- Excellent medical/dental and vision coverage— Eligible 1st day of the month after start date
- 401(k) retirement plan with company contribution (because you will retire someday)
- Flexible benefits—choose what you like, ignore the rest
- Generous employee discount
- Vacation and Personal Time
- Paid Holidays
- Tuition reimbursement
- Daily Pay; up to 50% of your pay
See more jobs in Lexington, KY