Job details

Pay information not provided

Childcare assistance, Referral program, Parental leave

Full-time

Sydney NSW

Full job description

Full Time

Sydney, NSW

Together, we can do great things

At GPT, we shape the places where people work, shop, live and connect.

We’re one of Australia’s leading diversified real estate investment managers, with $41.6 billion in assets under management across office, retail, logistics and living sectors.

Our strategy focuses on delivering sustainable value by creating exceptional experiences for our customers, investors and communities. Across our portfolio and funds platform, our people are constantly looking for better ways to innovate, improve and deliver strong long-term outcomes.

We believe progress comes from curiosity and collaboration. Our teams challenge convention, pioneer new ideas and work together to deliver industry leading outcomes.

It’s this culture at GPT that creates an employee experience where wellbeing, development and opportunity come first.

Come join us.

The role

This role is central to how GPT manages technology risk across the business, covering everything from corporate IT and operational technology (OT) to marketing technology and more.

Reporting to the Head of Cyber Risk, the Technology Risk & Governance Lead takes ownership of GPT's Information Security Management System (ISMS), sets risk appetite and tolerance thresholds, and makes sure governance is working consistently across all technology domains.

A big part of the role is taking complex technology risk and turning it into clear, meaningful insight for senior stakeholders. That means preparing risk analyses and papers for the Audit & Risk Committee, supporting investor due diligence, and contributing to governance reporting for the Information Technology Security Risk Committee (ITSRC), which is chaired by the Head of Cyber Risk.

Ultimately, the goal is to make sure GPT's technology controls are well-evidenced, defensible and aligned to the broader Group risk framework.

This is an exciting opportunity to help shape the next stage of GPT's technology governance, moving away from a purely cyber-focused model towards one that covers the full technology landscape.

What you will be doing

• Maintain the whole-of-technology risk and issue registers, assessing likelihood and impact and setting treatment plans aligned to the Group risk framework, including risk assessments across fund and investor systems, property platforms and building management systems.
• Own and maintain the ISMS, aligning policies, standards and procedures to ISO 27001, NIST CSF and the Essential Eight.
• Partner with the Head of Cyber Risk and Group Risk to define and maintain technology risk appetite and tolerance thresholds.
• Prepare governance papers and risk analysis for the Audit & Risk Committee and the ITSRC, tracking actions through to closure.
• Embed risk-by-design into system and platform implementations by governing the security architecture review process, so controls are assessed and security is engaged at the design stage rather than through late-stage remediation.
• Design and maintain the enterprise technology risk and control framework, owning the full lifecycle of technology policies and standards, including the policy exception process.
• Govern cyber and resilience risk across OT and MarTech platforms, overseeing convergence risk and network segregation in coordination with relevant teams.
• Assess and monitor third-party technology risk and map compliance with regulatory, AFSL and contractual obligations, coordinating audits and tracking findings to closure.
• Own the technology BCP and produce Board/executive risk reporting, supporting investor due diligence and embedding a risk-by-design mindset across the trust.

What makes you stand out

You are a senior technology risk and governance professional with significant experience spanning both cyber and non-cyber technology domains. You have a strong track record of designing or maturing governance frameworks such as an ISMS in complex, multi-domain environments, and are comfortable preparing and presenting risk and governance content to executive committees and Board-level stakeholders. Experience working within AFSL or similarly regulated environments is highly regarded, and you ideally hold a relevant certification such as CRISC, ISO 27001 Lead Implementer/Auditor or CGEIT.

What makes us stand out

We value our people

• Enjoy flexible working arrangements and generous leave options.
• Experience market-leading parental leave benefits including 22 weeks paid leave for either carer and childcare allowance once you return to work.
• Embrace diverse and challenging career opportunities, supported by our dedicated Learning & Development Team committed to your growth.
• Engage in comprehensive Wellbeing programs and benefit from market-leading policies and support tailored to diverse needs.
• Be recognised by peers through nomination awards and take part in our generous Employee Referral Program.

We know the power of a great experience

• Ranked 4th in the 2025 Gender Equality Global Report released by Equileap.
• Placed 1st of real estate investment trusts in the S&P Global Corporate Sustainability Assessment 2025 Yearbook.
• Earned a Gold ranking in Australian Workplace Equality Index (AWEI) for LGBTQIA+ inclusion.
• Awarded our fifth consecutive Employer of Choice for Gender Equality citation from the Workplace Gender Equality Agency (WGEA) in 2023-2025.
• Accredited Family Inclusive Workplace™.
• Committed to our second Stretch Reconciliation Action Plan (RAP).

Everyone counts

GPT offers an inclusive workplace culture and embraces people with diverse perspectives, skills and backgrounds. We welcome applications from First Nations candidates, members of the LGBTQIA+ community, people living with disability and people of diverse ages, cultures and backgrounds.

Let’s get started

If this role sounds like you, we want to hear from you. Go for it!

submit your application and Olivia Stojcevski from the Talent Acquisition Team will be in touch.