IT Director Job Description Template 2026

Last updated: October 11, 2026

By Tom Kenaley, President and Senior Partner, KORE1

An IT director job description should state the environment in numbers, which functions sit in-house versus with an MSP, who owns security when there is no CISO, and a base range, usually $160,000 to $210,000 at mid-market companies. Leave those out and you get a list of duties every IT leader in the country could claim. The candidates you want skip it.

Here’s the posting a plastic injection molder in Elk Grove Village, Illinois, put up last February. “Oversee enterprise IT infrastructure, drive digital transformation, and partner with leadership on technology strategy.” Eleven bullets after that. Not one number in any of them.

The company had about 340 employees across two plants, the second one in Rockford. Roughly 410 endpoints. A three-person IT team, an MSP that handled the network and the firewalls, a Microsoft 365 tenant, and an Epicor Kinetic ERP that the plant managers loved and the finance team tolerated. That’s a real job. A good one, honestly. None of it was in the posting.

So who applied? Directors from 2,000-person companies with teams of thirty, mostly. The first finalist came out of a Fortune 1000 distributor in Itasca and made it to round three before she asked how many people she’d be managing. Three. She withdrew that evening, politely, and her note mentioned the word “enterprise” twice.

We rewrote it in an afternoon. The new version opened with a block of eight numbers, people supported, sites, endpoints, servers, IT headcount, vendors, monthly tickets, and the annual IT budget, then a short table showing what the MSP ran versus what the team ran. Applications dropped from 212 to 61. The hire came from a food-packaging manufacturer in Schaumburg at $178,000 base against a printed range of $165,000 to $190,000, and she’d run a two-plant shop before. Fewer applicants. Far better ones.

Our IT director staffing desk reads a lot of these drafts. The same four gaps show up in most of them. Scale is described with adjectives. The MSP is invisible. Security ownership is implied and never stated. And the range is missing, which in Illinois has been a legal problem since January 2025.

Disclosure, up front. KORE1 earns a fee when an IT director we introduced accepts an offer. If this page gets your posting good enough to fill the seat yourself, that’s fine with us.

What an IT Director Posting Has to Carry

An IT director runs a company’s whole technology operation: infrastructure, end-user support, security posture, vendors, the IT budget, and the team that does the work. The job description has to show the size of that operation in numbers, because “IT director” covers a three-person shop and a forty-person department with the same two words.

One rung down, a systems administrator job description template gets away with a stack list. Windows Server 2022, VMware, Veeam, a one-week-in-four on-call rotation. Done. One rung up, the CIO job description template spends its words on the board, AI governance, and a three-year strategy. The director is stuck between them, and the posting drifts. Usually upward. We see “drive enterprise technology vision” on roles where the hire will also be the person re-imaging laptops on a Saturday.

Operator or strategist? Builder or turnaround? That call belongs in our guide to hiring a director of IT, and it comes first. Make it there. What follows assumes you already have.

The base bands below come straight from that hiring guide, so the two pages agree. The lines change a lot as the seat grows.

Pick your column and read it down. That’s the skeleton.

Put the Environment in Numbers

Experienced IT directors size a job in about ten seconds, and they do it with numbers you probably already have in a spreadsheet somewhere. Give them the numbers. Adjectives like “complex,” “enterprise-grade,” and “fast-paced” tell a candidate nothing, and they actively mislead the ones coming from bigger shops.

Eight figures cover it for most companies.

• People supported, and how many sit outside the main office.
• Sites. Plants, branches, warehouses, the closet in the sales office in Indianapolis that has its own switch.
• Endpoints, roughly. Laptops, desktops, shop-floor terminals, tablets.
• What’s on-prem and what isn’t. “Two Hyper-V hosts in Elk Grove, everything else in Microsoft 365 and Azure” is one sentence and it answers a dozen interview questions.
• IT headcount, by role.
• How many vendors and MSPs the director will manage?
• Monthly ticket volume. If you don’t track it, say so. That’s information too.
• The annual IT budget, or at least its band.

The budget one makes people nervous. It shouldn’t. A candidate who has run a $1.2 million budget and one who has run $9 million are applying for different jobs, and printing “$2 million to $3 million in combined opex and capex” saves both of them a phone call. If finance won’t allow the figure, print the signing limit instead. “You approve purchases up to $25,000 without CFO sign-off” says more about authority than any paragraph about partnering with leadership. It’s also the sentence experienced directors look for first.

The Bureau of Labor Statistics counted about 685,800 computer and information systems managers in 2025, and the IT director title lives inside that count alongside CIOs and IT managers. Lots of people. Very different jobs. The numbers block is how the right slice finds you.

Draw the Line Between Your Team and Your MSP

A title-insurance agency in Naperville posted an IT director role last spring with one line about outside help. “Manage vendor relationships.” About 220 employees and fourteen branch offices spread across DuPage and Will counties, an internal team of two, and an MSP out of Oak Brook that ran the help desk, the network, the backups, and the firewalls.

The MSP’s contract renewed in five months. It auto-renewed for 36. Nobody had mentioned that to the candidates, or, as it turned out, to the CFO who was hiring for the role.

The finalist, an IT manager from a regional bank in Downers Grove, asked a simple question in round two. “What do your two people do that the MSP doesn’t?” The CFO didn’t know. He called us that afternoon. We pulled the contract with him, built a table of every IT function and who performed it, and put the table in the posting. The finalist took the job at $171,000 and spent her first sixty days on a single decision, renew, renegotiate, or bring the help desk in-house. She renegotiated. Twelve months, not 36, with the help desk SLA cut from eight business hours to four.

That table is the second asset in a good IT director posting, after the numbers. It looks something like this.

Five rows. Maybe seven, if you count the copier lease and the phone system, which at a fourteen-branch agency is a Teams Phone migration that somebody started in 2024 and nobody has finished. The last column is the one that matters, because it tells a candidate whether they are inheriting decisions or just inheriting invoices. Contract dates you don’t control are a planning problem of their own, and our piece on building an IT roadmap without a CIO works through them quarter by quarter. For the posting, the dates are enough.

Should you name the MSP? Usually not by company name. “A Chicago-area MSP under a three-year agreement” does the job. If the director will be expected to staff up an internal help desk team once the contract ends, though, say so plainly. That’s a hiring assignment, and it belongs in the first-year section.

Who Signs the Cyber-Insurance Application?

At most companies under about 1,000 people there is no CISO. The IT director is the security program, whether the posting says so or not.

Say so. Then say exactly what that means, because “oversee security” can describe anything from approving a phishing-training vendor to personally attesting, on a document an insurer will read after a breach, that multifactor authentication is enforced on every remote login.

That second one bit a dental support organization in Tempe, Arizona. Thirty-eight offices. Their new IT director, two weeks in, was handed the cyber-insurance renewal questionnaire with a note from the CFO asking for it back by Friday. Question 14 asked whether MFA was enforced on all remote access. The previous answer, signed by the CFO a year earlier, had been yes. In six of the offices it was not, because the practice-management software’s remote-access client had never been put behind Entra ID. The director spent his third week fixing that before he would sign anything. Good call. Fixing it meant a conditional access policy, a new remote-access gateway at each of the six offices, and two evenings of calls with a practice-management vendor whose support line closed at 5 p.m. Mountain time. Nobody had told him in the posting, the interviews, or the offer letter that the signature was his.

Four questions settle the security line, and the posting should answer each one.

• Is there a CISO, a security manager, or an outside virtual CISO? If yes, who reports to whom.
• Who signs the cyber-insurance application and any customer security questionnaires?
• Which frameworks or audits apply, by name. SOC 2 Type II, HIPAA, PCI DSS, CMMC Level 2, ISO 27001. “Compliance” alone is not a requirement anybody can evaluate.
• Who owns the incident response plan, and when was it last tested?

NIST’s Cybersecurity Framework 2.0, released in February 2024, added a sixth core function called Govern, which covers roles, responsibilities, and accountability for cyber risk. That’s this section of your posting, more or less, in federal language. If the honest answer is that nobody owns security and you want the director to build it from zero, that’s a much bigger job. Price it that way, or bring in interim CISO services for the first year while the director gets the operation stable.

The Presence Line

“Hybrid” means three days a week at one company and two days a quarter at the next. Useless on its own.

Our Elk Grove client wrote this instead: “On site in Elk Grove Village three days a week, Rockford every other Thursday, after-hours escalation shared with the MSP’s NOC.” That’s about 65 miles up I-90 twice a month, and every finalist they interviewed afterward had already done the drive in their head before round one. Name the sites. Give the frequency. Say who gets the 2 a.m. call when the help desk can’t fix it, and how many nights a month that’s likely to be the director. A cloud-first company with no server room can run this role remote. A two-plant manufacturer with a Hyper-V cluster in a closet next to the break room can’t, and pretending otherwise just moves the disappointment to round three.

Pay, and the Illinois 14-Day Notice

Print the range. These bands are base only, from our hiring guide.

A director in the Bay Area, New York, or Boston runs twenty to thirty percent over the same person in Charlotte, Dallas, or Orange County. Industry moves it again, and our IT director salary guide breaks that out by sector and metro. For a broad anchor, the BLS put the median for computer and information systems managers at $175,140 in May 2025, up from $171,200 a year earlier, and projects 16 percent growth from 2025 to 2035 with about 53,500 openings a year. Plenty of demand. Not much patience for vague postings.

Illinois made the range mandatory for both of our Chicago-area clients. According to the Illinois Department of Labor’s Equal Pay Act salary transparency FAQ, employers with 15 or more employees must include the pay scale and a general description of benefits in any job posting made or republished after January 1, 2025, for work performed at least partly in Illinois or reporting to an Illinois supervisor. Open-ended phrasing like “$40,000 and up” doesn’t count. “Depending on experience” doesn’t either. Benefits can sit behind a link, but only one click away and specific to the position. A generic careers page fails.

Then there’s the part almost nobody plans for. When you post a role externally, Illinois requires you to tell your current employees about that promotional opportunity within 14 calendar days. Every employee. Same time.

Think about who reads that notice in an IT director search. Your IT manager. Your senior sysadmin. The help desk lead who has quietly been doing half of the director’s job since the last one left. At the Elk Grove molder, it was a network administrator with nine years at the company, and she applied. She didn’t get it, but she did get a real interview and a written development plan, and she’s still there. If someone inside is a serious candidate, have that conversation before the external posting goes up, not after the notice lands in their inbox.

The fines aren’t huge. Up to $500 for a first violation on an active posting, $2,500 for a second, and up to $10,000 from the third offense on. The department also says a recruiter or job board posting on your behalf has to carry the same information. Several other states have range laws of their own, and even where none applies, an IT director posting without a range mostly attracts people guessing high. To pin a number for one seat in one metro, our salary benchmark assistant gives finance a defensible starting point in a few minutes.

IT Director Job Description Template

Copy it. Replace every bracket. Lines marked “Internal” are notes for you and come out before the posting goes anywhere, including your own careers page.

Job Title

Director of Information Technology, [company] ([N] sites, team of [N], reports to [title]) [Internal: if nobody reports to this role, and an MSP does all the work, the title is IT Manager. Price it accordingly.]

The Company and the Environment

[Company] [makes/sells/provides] [product or service] for [customers], with about [N] employees across [N] locations in [cities]. You will support [N] people and roughly [N] endpoints. [One sentence on what is on-prem and what is in the cloud, by name: Microsoft 365, Google Workspace, Azure, AWS, the ERP.] We handle about [N] tickets a month. The annual IT budget is [figure or band], and you approve spending up to $[amount] without further sign-off.

The Team and the Vendors

[A short service map: function, who does it today, contract end date, and what you will decide.] Your team today: [roles and count]. [Internal: if an internal candidate was considered, say how it resolved in one sentence, without names. Illinois requires a notice to current employees within 14 days of the external posting.]

Security and Compliance

You [own the security program / work with our [CISO / vCISO], who reports to [title]]. You sign the cyber-insurance application and customer security questionnaires. Frameworks in scope: [SOC 2 Type II / HIPAA / PCI DSS / CMMC Level 2 / none yet]. Our incident response plan was last tested in [month, year].

Your First Year

• Within 60 days, a written assessment of the environment and a decision on [the MSP contract ending in month]
• Close the gaps on [MFA coverage / backup testing / audit finding] before [renewal or audit date]
• Deliver [the named project: ERP upgrade, office opening, tenant consolidation] by [quarter]
• Hire or develop [the open role], with a backup for every critical system

What We Are Looking For

• [N] or more years leading an IT team in an environment of roughly our size, with budget you were accountable for
• Hands-on history with [the two or three platforms that matter most here]
• A vendor contract you renegotiated, consolidated, or exited, and what it saved
• Someone who can explain a technical risk to our CFO in one paragraph

Helpful, Not Required

• CISSP, ITIL 4, PMP, or a cloud certification [Internal: listing these as preferred keeps strong candidates from screening themselves out]
• Experience in [your industry], if the team already knows its applications well
• A bachelor’s degree, if the experience is there

Where You Work

[On site in [city] [N] days a week / hybrid / remote within [states].] Travel to [sites] about [frequency]. After-hours escalation: [who covers what, and how often you are the escalation point].

Pay and Benefits

Base salary of $[minimum] to $[maximum], with a bonus target of [N] percent. [Medical, dental, vision, 401(k) match, paid time off: one or two sentences specific to this position, or a direct link to a page for this role.] [Internal: Illinois, Colorado, California, New York, Washington, and others require a real range. “Competitive” or “$150,000 and up” does not qualify.]

Things Hiring Managers Ask Before Posting

Do we have to list a salary range?

In Illinois, yes, for employers with 15 or more employees, and similar rules apply in California, Colorado, New York, Washington, and a growing list of other states.

Even where no law applies, we’d print it anyway. An IT director search without a range spends its first two weeks filtering out people who assumed a different number.

Should we name our MSP or our current vendors?

Name the platforms, not the vendors, because “Microsoft 365, Intune, and Epicor Kinetic” tells a candidate the environment while “a regional MSP under contract through 2027” tells them the situation.

Which certifications belong under requirements?

Usually none, since a hard certification requirement screens out experienced directors who never needed one, while listing CISSP, ITIL 4, or PMP as preferred still signals what matters.

The exception is regulated work where a customer or contract demands it, a defense supplier pursuing CMMC Level 2 being the common one. Then write the requirement and say why.

Should we really print the IT budget in a job posting?

Print a band if you can, because a $1 million budget and a $9 million budget attract different candidates, and the band filters them before anyone spends an hour on a call.

If finance says no, print the signing limit. Almost every company is comfortable with that one.

Our “director” runs two people and an MSP. Is the title a problem?

Not if the posting says so, since plenty of strong candidates want a small, high-ownership seat, and the title only backfires when the numbers are hidden until round three.

Where it does get awkward is pay. A director title with two reports and a $130,000 ceiling will pull applicants who read “director” and expect $190,000. Print the range next to the team size and the mismatch sorts itself out before anyone books a call. If nobody reports to the role at all, though, and the MSP does every hands-on task, you’re describing an IT manager, and you’ll save about $30,000 by calling it one.

Can an IT director role be posted as fully remote?

Sometimes, for cloud-first companies with no server room and distributed staff, but most IT director roles still involve plants, branches, or hardware that someone eventually has to touch.

If it’s remote, say what happens when something physical breaks. Who drives over? If the answer is “a local MSP tech,” name that arrangement in the posting. Candidates ask it on the first call, every time, and a vague answer reads as nobody having thought it through, which is a strange impression to give someone you’re hiring to think things through.

Write the Numbers Before the Adjectives

The Elk Grove posting that worked had more numbers in its first paragraph than the original had in eleven bullets. That’s most of the trick.

Numbers, service map, security line, presence, range. Five sections. Usually in that order. If you’d like a recruiter to mark up a draft before it goes up and starts that 14-day clock, our IT director search team will do it in a first call, the director of IT hiring playbook covers the search, and our IT director interview loop covers the questions that come after. Most of these searches close as direct hire placements. You can talk to a recruiter and bring the draft. Of the people KORE1 places, 92 percent are still in the seat a year later, and for an IT director that year includes a budget cycle, an insurance renewal, and probably at least one outage at a bad hour.