Technology Risk & Governance Lead

The GPT Group; Sydney; Hybrid; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Flexible work arrangements

Generous leave options

Learning & Development

Wellbeing programs

Employee Referral Program

Job summary

The GPT Group is seeking a senior Technology Risk & Governance Lead in Sydney to manage the Information Security Management System (ISMS), set risk appetite, and drive governance across all technology domains. You will translate complex risk into clear insights for senior stakeholders and support due diligence for investors.

Reporting to the Head of Cyber Risk, you’ll influence the ITSRC, align controls to the broader risk framework, and help shape GPT’s technology governance across cyber and

Qualifications

• Senior technology risk and governance professional with cross-domain experience (cyber and non-cyber).
• Experience designing or maturing governance frameworks such as ISMS in complex environments.
• Comfort presenting risk and governance content to executive committees and Board-level stakeholders.

Responsibilities

• Identify and assess development opportunities; prepare and present business cases and funding reports to Exec and Board level stakeholders.
• Develop masterplan strategies and business plans aligning with ESG objectives and approvals processes.
• Lead project teams and manage procurement across contractors, consultants and regulators; ensure delivery within approved parameters.
• Oversee Authority Approvals and negotiate council/Department conditions.
• Lead leasing, marketing and sales processes; secure lease commitments and manage marketing activities to completion.
• Design and maintain enterprise technology risk and control framework; manage policy lifecycle and exceptions.
• Govern cyber and resilience risk across OT and MarTech platforms; oversee convergence and network segregation.
• Assess third-party technology risk and map regulatory, AFSL and contractual obligations; coordinate audits and closure of findings.
• Own technology BCP and produce Board/executive risk reporting; support investor due diligence and embed risk-by-design mindset.

Skills

Cyber risk governance

Executive reporting

Stakeholder communication

Risk assessment

Governance frameworks

Education

CRISC

ISO 27001 Lead Implementer/Auditor

CGEIT

Job description

Select how often (in days) to receive an alert:

At GPT, we shape the places where people work, shop, live and connect.

We’re one of Australia’s leading diversified real estate investment managers, with $41.6 billion in assets under management across office, retail, logistics and living sectors.

Our strategy focuses on delivering sustainable value by creating exceptional experiences for our customers, investors and communities. Across our portfolio and funds platform, our people are constantly looking for better ways to innovate, improve and deliver strong long-term outcomes.

We believe progress comes from curiosity and collaboration. Our teams challenge convention, pioneer new ideas and work together to deliver industry leading outcomes.

It’s this culture at GPT that creates an employee experience where wellbeing, development and opportunity come first.

The role

This role is central to how GPT manages technology risk across the business, covering everything from corporate IT and operational technology (OT) to marketing technology and more.

Reporting to the Head of Cyber Risk, the Technology Risk & Governance Lead takes ownership of GPT's Information Security Management System (ISMS), sets risk appetite and tolerance thresholds, and makes sure governance is working consistently across all technology domains.

A big part of the role is taking complex technology risk and turning it into clear, meaningful insight for senior stakeholders. That means preparing risk analyses and papers for the Audit & Risk Committee, supporting investor due diligence, and contributing to governance reporting for the Information Technology Security Risk Committee (ITSRC), which is chaired by the Head of Cyber Risk.

Ultimately, the goal is to make sure GPT's technology controls are well-evidenced, defensible and aligned to the broader Group risk framework.

This is an exciting opportunity to help shape the next stage of GPT's technology governance, moving away from a purely cyber-focused model towards one that covers the full technology landscape.

What you will be doing

• Identify and assess development opportunities, preparing and presenting business cases, commercial proposals and funding reports to Executive and Board level stakeholders.
• Develop masterplan strategies and business plans that maximise returns, minimise risk and align with ESG objectives, managing consensus and approval processes.
• Lead project teams and manage procurement across contractors, consultants and regulatory authorities, ensuring delivery within approved commercial and time parameters.
• Oversee all Authority Approvals and negotiate conditions with Councils and the Department of Planning.
• Lead the leasing, marketing and sales process, securing lease commitments and managing all project marketing activity through to completion.
• Design and maintain the enterprise technology risk and control framework, owning the full lifecycle of technology policies and standards, including the policy exception process.
• Govern cyber and resilience risk across OT and MarTech platforms, overseeing convergence risk and network segregation in coordination with relevant teams.
• Assess and monitor third-party technology risk and map compliance with regulatory, AFSL and contractual obligations, coordinating audits and tracking findings to closure.
• Own the technology BCP and produce Board/executive risk reporting, supporting investor due diligence and embedding a risk-by-design mindset across the trust.

What makes you stand out

You are a senior technology risk and governance professional with significant experience spanning both cyber and non-cyber technology domains. You have a strong track record of designing or maturing governance frameworks such as an ISMS in complex, multi-domain environments, and are comfortable preparing and presenting risk and governance content to executive committees and Board-level stakeholders. Experience working within AFSL or similarly regulated environments is highly regarded, and you ideally hold a relevant certification such as CRISC, ISO 27001 Lead Implementer/Auditor or CGEIT.

What makes us stand out

• Enjoy flexible working arrangements and generous leave options.
• Experience market-leading parental leave benefits including 22 weeks paid leave for either carer and childcare allowance once you return to work.
• Embrace diverse and challenging career opportunities, supported by our dedicated Learning & Development Team committed to your growth.
• Engage in comprehensive Wellbeing programs and benefit from market-leading policies and support tailored to diverse needs.
• Be recognised by peers through nomination awards and take part in our generous Employee Referral Program.

We know the power of a great experience

• Ranked 4th in the 2025 Gender Equality Global Report released by Equileap.
• Placed 1st of real estate investment trusts in the S&P Global Corporate Sustainability Assessment 2025 Yearbook.
• Earned a Gold ranking in Australian Workplace Equality Index (AWEI) for LGBTQIA+ inclusion.
• Awarded our fifth consecutive Employer of Choice for Gender Equality citation from the Workplace Gender Equality Agency (WGEA) in 2023-2025.
• Committed to our second Stretch Reconciliation Action Plan (RAP).

GPT offers an inclusive workplace culture and embraces people with diverse perspectives, skills and backgrounds. We welcome applications from First Nations candidates, members of the LGBTQIA+ community, people living with disability and people of diverse ages, cultures and backgrounds.