About the job

Together, we can do great things

At GPT, we shape the places where people work, shop, live and connect.

We’re one of Australia’s leading diversified real estate investment managers, with $41.6 billion in assets under management across office, retail, logistics and living sectors.

Our strategy focuses on delivering sustainable value by creating exceptional experiences for our customers, investors and communities. Across our portfolio and funds platform, our people are constantly looking for better ways to innovate, improve and deliver strong long-term outcomes.We believe progress comes from curiosity and collaboration. Our teams challenge convention, pioneer new ideas and work together to deliver industry leading outcomes.

It’s this culture at GPT that creates an employee experience where wellbeing, development and opportunity come first.

Come join us.

The role

This role is central to how GPT manages technology risk across the business, covering everything from corporate IT and operational technology (OT) to marketing technology and more.Reporting to the Head of Cyber Risk, the Technology Risk & Governance Lead takes ownership of GPT's Information Security Management System (ISMS), sets risk appetite and tolerance thresholds, and makes sure governance is working consistently across all technology domains.

A big part of the role is taking complex technology risk and turning it into clear, meaningful insight for senior stakeholders. That means preparing risk analyses and papers for the Audit & Risk Committee, supporting investor due diligence, and contributing to governance reporting for the Information Technology Security Risk Committee (ITSRC), which is chaired by the Head of Cyber Risk.

Ultimately, the goal is to make sure GPT's technology controls are well-evidenced, defensible and aligned to the broader Group risk framework.

This is an exciting opportunity to help shape the next stage of GPT's technology governance, moving away from a purely cyber-focused model towards one that covers the full technology landscape.

What you will be doing

• Maintain the whole-of-technology risk and issue registers, assessing likelihood and impact and setting treatment plans aligned to the Group risk framework, including risk assessments across fund and investor systems, property platforms and building management systems.
• Own and maintain the ISMS, aligning policies, standards and procedures to ISO 27001, NIST CSF and the Essential Eight.
•