Data Security

**About QS**

QS is a global leader in higher education services. We are the data analytics, performance insight

provider and intelligence partner supporting university excellence across the world. Our student

recruitment and enrolment solutions enable universities and business schools to connect with

talented individuals that are seeking to further their academic progress and career development. Our

portfolio of professional services includes consultancy, student mobility and academic partnerships

management, and branding solutions.

We publish highly visible and influential rankings of international universities, including the QS World

University Rankings® which reaches a global audience of hundreds of millions of people. QS keeps

growing organically, through acquisition and by recruiting top talent across key regions.

**The Role & Key responsibilities**:
1**. To develop and maintain the information security policy and accompanying standards, procedures, and**

**guidance as per ISO 27001 standards and organisation expectation.**

**2. Review ISMS policies, procedures, and other core ISMS framework documents like Statement of**

**Applicability (SOA etc, for departments in scope and ensure they are updated**

3. Implementation level Knowledge of Data Privacy Policy in (EU (European Union), EEA (European

Economic Area) and 3rd Countries etc.)

4. Facilitate the ISMS risk management program by reviewing all existing asset registers, change logs and

risk registers.

5. Research and stay informed of potential information security threats, breaches, industry trends,

emerging technologies, and required responses/alternatives.

6. Collaborate with the Global stakeholders/ process owners on a regular basis to ensure the ISMS

operates smoothly and continuously improves

7. Manage all internal and external audit findings and ensure their remediation on an agreed schedule with

the respective Process Owners

8. Support the various ISMS roles with their responsibilities as documented in the ISMS operations manual.

9. Awareness on Customer escalation management process, pertaining to data.

10. Ensuring business complies with Data Privacy requirements.

11. Plan for audits and demonstrate processes to auditors (internal and external) and track finding, if any to

closure

12. Ensure appropriate security controls (e.g., encryption, levels of access etc.) are applied throughout the

information lifecycle

13. Report against Organization KPIs and analyze the trends for improvements

14. Co-ordinate on development, and delivery of security training programs and individual -handholding

sessions

15. Processing invoices

**Technical skills and qualifications**
- Minimum educational qualification: Engineering in IT (B. E, B.Tech)
- ** Professional privacy and security management certification
- ISMS, Data Privacy & Cyber Security.**
- **Minimum of 3 to 5 years of experience in a combination of risk management, information security and IT**
- Knowledge of information security management standards, such as ISO 27001 and ISO 27701.
- Experience in working in a Product company is desirable.
- Experience in ISO implementation in information security e.g., ISO 27001
- Experience in Microsoft Office Suite, SharePoint, Atlassian Suite (Jira, Confluence etc.)

**Behavioural competencies**
- Collaboration and communication
- Conflict Management
- Leadership Skill
- Excellent written and verbal communication skills and high level of personal integrity.
- Methodical approach to work, attention to detail and delivery of high-quality results

**A few things that make QS a great place to work include**:

- Competitive package.
- Flexible to work as per global working hours.
- Vibrant social environment and multicultural, multinational culture, strong team spirit.
- Focus on welfare - global wellness team, Calm app, EAP and health plan,

mental health first aiders, diversity, and inclusion initiatives.
- Strong recognition and reward programs - peer recognition platform, quarterly and annual

awards, annual bonus scheme.

QS Quacquarelli Symonds is proud to be a fair and equal organization where everyone has the same

opportunity to achieve their full potential, irrespective of their background or personal attributes. We

celebrate our diversity and believe through sharing our experiences we can learn from one another, be

stronger together, and enable our business to thrive.