Security Review and Approval ZIA

ITConnect; Warszawa; Hybrid; PLN 70.000 - 90.000; Vollzeit

Zusammenfassung

ITConnect is seeking a security- and policy-focused reviewer/approver for Zscaler Internet Access (ZIA) to assess requests, validate business justification, apply least-privilege principles, and approve or escalate within delegated authority.

Responsibilities include reviewing URL filtering, cloud application controls, DLP, and threat-protection policies, recording decisions with scope and safeguards, and coordinating with IAM and security teams to ensure evidence and rollback plans are in place.

Qualifikationen

• Hands-on experience reviewing or administering ZIA policies and access.
• Ability to assess risk, determine acceptable safeguards and document decisions.
• Experience with change management and audit evidence in security processes.

Aufgaben

• Review requests affecting ZIA policies and access controls.
• Approve, approve with conditions, or escalate requests with clear rationale.
• Ensure implementation scope, logs, rollback, and ownership are defined.
• Coordinate with security, IAM, and operations teams to resolve issues.
• Maintain an approval and exception register with key details.

Kenntnisse

ZIA policies

Networking basics

IAM / access management

Least-privilege mindset

Security auditing

Ausbildung

Degree in IT / CS or equivalent

Tools

Zscaler ZIA

Enterprise service-management tools

Jobbeschreibung

The person in this role will review and assess requests relating to Zscaler Internet Access (ZIA), which provides security controls for internet and cloud-service access. The proposed access should have a valid business justification, follow least-privilege principles and meet the organization’s security requirements. The person will approve requests within delegated authority, reject requests that present unacceptable risk and escalate exceptions requests conflicting security mandate.

• Review requests affecting URL filtering, cloud application controls, cloud firewall rules, data loss prevention (DLP) and threat-protection policies, where these capabilities are deployed. Assess the requested destinations, affected users, permitted activities and potential exposure of organizational data.
• Evaluate website allowlisting and internet-access exceptions against documented business needs, destination reputation, data sensitivity and existing security policies. Require requests to identify the relevant domains, URLs, destination addresses, ports and protocols, as applicable, rather than accepting unnecessarily broad access.
• Assess each request for unauthorized access, data exposure, weakening of security controls and potential service disruption. Record the decision as approved, approved with conditions, rejected or escalated with a clear explanation and any required safeguards.
• Ensure approved requests include a defined implementation scope, testing evidence(logs), rollback procedure and authorization and ownership. High-risk exceptions must be referred to the designated security authority and business risk owner
• Use relevant policy, activity and administrator audit records to verify that implemented changes match their approvals and to support investigations. ZIA records administrator and API actions.
• Maintain an approval and exception register containing the request reference, business justification, affected resources, risk assessment, approver, conditions and review or expiry date. Coordinate periodic reviews to identify unused access, expired exceptions and policies that no longer meet business needs. Work with Zscaler operations, identity and access management, application owners and the security operations team to resolve issues.
• Hands-on experience reviewing or administering ZIA policies, application access and security exceptions.
• Understanding of networking, DNS, HTTP/HTTPS, TLS, proxy and firewall controls, identity-provider integration, single sign-on, multifactor authentication and device posture.
• Ability to evaluate least-privilege access, data-protection requirements, policy conflicts and compensating controls.
• Experience with change management, approval records, audit evidence and clear communication of security decisions to technical and business stakeholders.
• A relevant degree or equivalent practical experience is desirable. Zscaler training or certification, security certification and experience with enterprise service-management tools are preferred.