Security Review and Approval ZIA

Our requirements

• Hands-on experience reviewing or administering ZIA policies, application access and security exceptions.
• Understanding of networking, DNS, HTTP/HTTPS, TLS, proxy and firewall controls, identity-provider integration, single sign-on, multifactor authentication and device posture.
• Ability to evaluate least-privilege access, data-protection requirements, policy conflicts and compensating controls.
• Experience with change management, approval records, audit evidence and clear communication of security decisions to technical and business stakeholders.
• A relevant degree or equivalent practical experience is desirable. Zscaler training or certification, security certification and experience with enterprise service-management tools are preferred.

Your responsibilities

• Review requests affecting URL filtering, cloud application controls, cloud firewall rules, data loss prevention (DLP) and threat-protection policies, where these capabilities are deployed. Assess the requested destinations, affected users, permitted activities and potential exposure of organizational data.
• Evaluate website allowlisting and internet-access exceptions against documented business needs, destination reputation, data sensitivity and existing security policies. Require requests to identify the relevant domains, URLs, destination addresses, ports and protocols, as applicable, rather than accepting unnecessarily broad access.
• Assess each request for unauthorized access, data exposure, weakening of security controls and potential service disruption. Record the decision as approved, approved with conditions, rejected or escalated with a clear explanation and any required safeguards.
• Ensure approved requests include a defined implementation scope, testing evidence(logs), rollback procedure and authorization and ownership. High-risk exceptions must be referred to the designated security authority and business risk owner
• Use relevant policy, activity and administrator audit records to verify that implemented changes match their approvals and to support investigations. ZIA records administrator and API actions.
• Maintain an approval and exception register containing the request reference, business justification, affected resources, risk assessment, approver, conditions and review or expiry date. Coordinate periodic reviews to identify unused access, expired exceptions and policies that no longer meet business needs. Work with Zscaler operations, identity and access management, application owners and the security operations team to resolve issues.

About the project

This is how we organize our work

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• integration events

Recruitment stages

• 1.
  Rozmowa z rekruterem ok. 15 min
• 2.
  Spotkanie rekrutacyjne z klientem ok. 60 min

IT CONNECT Sp. z o.o. Sp. k.