IT Director Executive Search
Hiring the right IT Director is one of the most consequential technology decisions a business can make — and one of the most frequently delayed. Many businesses operate for years without dedicated senior technology leadership, managing IT through a combination of outsourced support, a capable but overstretched IT Manager, and a CEO who makes technology decisions based on instinct rather than expertise. When that structure eventually breaks down — through a security incident, a failed systems project, a period of rapid growth, or the arrival of a PE investor who expects a proper technology governance framework — the need for an IT Director becomes urgent rather than considered.
Exec Capital places IT Directors for UK businesses on a permanent, interim, and fractional basis. We have an active network of IT Director candidates with experience across infrastructure, cybersecurity, digital transformation, and multi-site operations — including specialists with sector-specific experience in financial services, healthcare, manufacturing, and professional services. Every search is run by our specialist team, with Adrian Lawrence FCA overseeing each mandate. This page covers permanent IT Director recruitment, Head of IT recruitment and permanent Chief Information Officer (CIO) recruitment, and explains how those roles differ so you can brief the right one.
Short answer
IT Director recruitment is the search for the senior leader who owns a business’s technology estate, IT team, suppliers and cyber security, and who can explain technology risk and investment to the board. Most UK businesses hire one when IT failures start to carry real commercial consequences, choosing between an IT Director, a Head of IT for a more operational remit, or a Chief Information Officer where information strategy is a board-level matter. Exec Capital runs permanent searches for all three, and places interim and fractional technology leaders when the need is immediate or part-time.
From Adrian Lawrence: “The IT Director brief we receive most often is from a CEO who has been managing technology decisions alongside everything else and has finally reached the point where that is no longer sustainable. The business has grown, the technology environment has become genuinely complex, and the consequences of getting IT wrong — security breaches, system failures, regulatory non-compliance, failed digital projects — are now serious enough to justify dedicated senior leadership. Getting the brief right at that point matters enormously. An IT Director who can manage the infrastructure but cannot engage credibly with the board on technology strategy is solving the wrong problem. We spend time on that distinction before we start searching.”
How IT Director Recruitment Works
Every IT Director, Head of IT and CIO search we run follows the same six stages. We agree the timetable with you at briefing, because the right pace depends on the seniority of the role, the notice periods candidates are working and how quickly your own interview panel can meet. Nothing starts until the brief is agreed in writing.
| Stage | What happens | What you receive |
|---|---|---|
| 1. Brief | We meet the CEO, COO or CFO — and, where appropriate, the outgoing IT lead — to map the technology estate, the team, the suppliers, live projects, known risks and the reporting line. We test whether the role is genuinely an IT Director, a Head of IT or a CIO before anything is written. | A written role brief and candidate profile for you to sign off. |
| 2. Search | Direct, targeted approaches to technology leaders who match the brief, drawing on our network and on research into comparable businesses. Advertising is used only where it adds reach. | Progress updates on market response and any calibration the brief needs. |
| 3. Shortlist | We interview candidates against the brief: technical depth, delivery record, supplier management, security thinking and board communication. | A shortlist with a written assessment of each candidate. |
| 4. Interviews | We help design the process — typically a first interview, a scenario or case exercise (for example, a first-90-day plan for your estate) and a final meeting with the board or investor. | Interview guides and structured feedback after each round. |
| 5. Offer | We manage the offer, notice period and any counter-offer, and take references. | An accepted offer and an agreed start date. |
| 6. Onboarding | We stay in contact with you and the appointee through the first months, so that any mismatch is raised early. Our executive onboarding guide sets out what good looks like. | Check-ins with both sides after the start date. |
The detail of how we assess technology candidates at each stage is set out in the search process section further down this page.
IT Director, CTO, or CIO: Which Does Your Business Need?
One of the most important decisions when hiring senior technology leadership is whether the role is an IT Director, a Chief Technology Officer (CTO), or a Chief Information Officer (CIO). These titles are used inconsistently across the market, but in most organisations they represent meaningfully different roles with different focuses, different candidate profiles, and different relationships with the board. Getting the title and scope right before starting the search is essential.
IT Director — typically the most appropriate appointment for businesses where technology is primarily an operational and infrastructure function. The IT Director manages the company’s IT systems, leads the IT team, oversees vendors and outsourced providers, ensures cybersecurity and compliance, and delivers technology projects that support the business’s operations. They report to the CEO or COO and may or may not sit on the executive team. Most businesses in traditional sectors — professional services, financial services, manufacturing, retail — appoint an IT Director rather than a CTO or CIO because their technology requirement is operational continuity and risk management rather than technology-led product development.
CTO (Chief Technology Officer) — appropriate for technology-led businesses where the product or service is built on technology. The CTO leads engineering, product development, and technology strategy — they are thinking about what the company builds, not just how it operates. For software companies, SaaS businesses, and technology startups, a CTO is the right appointment. For a professional services firm or a manufacturer, an IT Director is almost always more relevant. See our CTO recruitment page for product and engineering leadership appointments.
CIO (Chief Information Officer) — appropriate for larger, more complex organisations where information management, data governance, and enterprise architecture are primary strategic concerns. The CIO typically operates at C-suite level, sits on the executive board, and leads the organisation’s information strategy rather than its day-to-day IT operations. For businesses below 500 employees, a CIO is rarely the right appointment — the IT Director role covers the necessary ground at a more appropriate level and cost. We cover permanent CIO recruitment in its own section further down this page.
If your business primarily needs someone to own the IT infrastructure, lead the IT team, manage vendors, deliver technology projects, and ensure cybersecurity — an IT Director is almost certainly the right appointment. If you are unsure, Exec Capital will help you define the scope during the brief process.
IT Director vs Head of IT vs CIO vs CTO
The question we are asked most often by boards weighing these titles is some version of “CIO vs IT Director — which do we need?” The honest answer is that the titles overlap, and the remit matters more than the label. The table below sets out how the four roles usually differ in UK businesses. For a longer discussion of the two most commonly confused titles, see our guide to the difference between an IT Director and a CIO.
| Head of IT | IT Director | CIO | CTO | |
|---|---|---|---|---|
| Main focus | Running IT operations and the service desk reliably | Owning technology operations, security, suppliers and the IT roadmap | Information and technology strategy across the whole organisation, including data, architecture and business change | The technology the company builds and sells — product engineering and platform |
| Typical reporting line | IT Director, COO, CFO or FD | CEO, COO or CFO | CEO | CEO |
| Executive team seat | Rarely | Sometimes — depends on how central technology is to the business | Usually | Usually, in technology-led businesses |
| Typical organisation | SMEs, single-site businesses, or a divisional role within a group | Mid-market, multi-site and PE-backed businesses | Larger and more complex organisations, groups, regulated firms and the public sector | Software, SaaS, fintech and other product businesses |
| Core accountabilities | Infrastructure, end-user support, service levels, patching, day-to-day supplier management | All of the Head of IT remit plus strategy, budget, cyber security posture, major projects and board reporting | Enterprise architecture, data governance, the portfolio of change, the technology operating model and group-level investment | Engineering teams, product architecture, development practice and the technical side of product due diligence |
| Typical background | Infrastructure or service management, often ITIL-trained | Head of IT or IT operations leader with a project and supplier record | IT Director or divisional CIO with an enterprise transformation record | Software engineering and engineering leadership |
| The wrong hire when… | The business needs someone to set strategy and face the board | Technology is the product (hire a CTO), or the organisation is large and multi-divisional (consider a CIO) | The business is relatively small and needs hands-on technology leadership | The requirement is mostly running internal systems, security and suppliers |
Many businesses get the sequence wrong. A SaaS company that hires a CTO may still need an IT Director or Head of IT to run internal systems, security and suppliers once it reaches a certain size, so that the CTO is not pulled away from the product. A group with a CIO usually has IT Directors or Heads of IT running individual divisions beneath them. And where cyber security has become a specialist board-level risk in its own right — common in financial services and in businesses that hold large volumes of personal data — a Chief Information Security Officer may sit alongside the IT Director; see our CISO recruitment service for that appointment.
When we take a brief, we use this comparison as a working tool rather than a rulebook. The job title you advertise affects who applies and what they expect to be paid, so getting it right is part of getting the hire right. A role titled CIO that is really an IT Director job will attract candidates who leave within a year because the remit was smaller than promised; an IT Director role that is really a Head of IT job will frustrate a strategic hire who finds there is no budget or board access to work with.
Head of IT Recruitment
A Head of IT is often the first senior technology hire a growing business makes, and it is frequently the right one. The role suits businesses where the technology estate is reasonably well defined — a known set of systems, a manageable number of sites, a managed service provider or small internal team — and where the main need is for someone to run it properly: service levels met, patching and backups done, users supported, suppliers held to account and small projects delivered on time.
The best Heads of IT combine hands-on technical credibility with the organisational discipline to run a service. They know the infrastructure well enough to challenge a supplier’s diagnosis, they keep accurate records of assets and licences, and they report clearly to whoever owns IT at board level — often the CFO, FD or COO. When we recruit a Head of IT, we test for that operational discipline as much as for technical depth, because a technically strong candidate who cannot run a service desk to agreed standards will not solve the problem the business has.
There are two situations where a Head of IT brief needs a second look. The first is when the business actually needs strategy, budget ownership and board engagement — in that case it is an IT Director role, and hiring a Head of IT will leave the strategic gap unfilled. The second is when a new IT Director is being hired at the same time or soon after; in that case it usually makes sense for the IT Director to be in post first, so that they can shape the Head of IT role and choose the person they will rely on. Our Director of IT job description shows how the responsibilities step up from one role to the other.
Exec Capital recruits Heads of IT on a permanent basis, as standalone appointments and as part of building out a new IT Director’s team. Pay is structured as salary plus benefits, sometimes with a bonus linked to service performance or project delivery, and we advise on where the package should sit for your sector and location during the brief.
CIO Recruitment: Hiring a Permanent Chief Information Officer
A permanent Chief Information Officer is the right appointment when information and technology have become a strategic matter for the whole organisation rather than a function serving it. In practice, that tends to mean one or more of the following: the organisation operates through several divisions, entities or countries, each with its own systems; it has grown by acquisition and needs a coherent technology and data architecture; technology spend is large enough that portfolio decisions carry board-level consequences; or regulators, funders or investors expect a single accountable leader for technology and data.
What a permanent CIO is accountable for
- Technology and information strategy: a multi-year plan, owned at executive level, setting out what the organisation will build, buy, retire and consolidate.
- Enterprise architecture and data: the target architecture, integration standards and data governance — often in partnership with a Chief Data Officer where one exists (see our Chief Data Officer recruitment).
- The portfolio of change: prioritising and governing major programmes such as ERP replacement, cloud migration and post-acquisition integration.
- Operating model and sourcing: what is run in-house, what is outsourced, and how strategic suppliers are governed.
- Technology risk: cyber security, resilience and third-party risk, usually working alongside a CISO in larger organisations.
- Leadership: leading IT Directors, Heads of IT and specialist leaders across the group, and building a credible technology leadership bench.
How a CIO search differs from an IT Director search
The candidate pool is smaller and more senior, and most strong candidates are in post and not looking. CIO searches therefore rely almost entirely on direct approach. The assessment also shifts: we put more weight on how a candidate has set and funded strategy, governed large supplier relationships and led other senior leaders, and less on hands-on technical depth. Board members, non-executive directors or investors are usually involved in the final stage, and we take references that speak to the candidate’s standing with boards, not just with their own teams.
In regulated financial services, the CIO title does not in itself carry a senior management function under the Senior Managers and Certification Regime. In larger banks and insurers, responsibility for internal operations and technology is typically allocated to the holder of the Chief Operations function (SMF24), which may or may not be the CIO. We establish at briefing whether the role will carry a senior management function or prescribed responsibilities, because that changes both the candidate profile and the timetable for regulatory approval.
Common mistakes in CIO hiring
- Using the CIO title to attract stronger candidates when the remit, budget and reporting line are those of an IT Director.
- Hiring a CIO with a large-enterprise background into a mid-sized business that needs someone hands-on.
- Failing to settle the boundaries with the CTO, Chief Digital Officer, Chief Data Officer or CISO before the search starts, which leads to overlap and early conflict.
- Leaving the CIO without an executive seat, which makes it hard for them to influence decisions that create technology risk.
Exec Capital runs permanent CIO searches alongside our IT Director work. Where the need is immediate, an interim CIO can hold the role while the permanent search runs, and our guide on how to hire a CIO sets out the process in more detail for boards running their first CIO appointment. Our CIO job description is a useful starting point for the brief.
Hiring an IT Director, Head of IT or CIO?
Tell us what the role needs to fix and we will tell you candidly which title and format fits, then run the search with Adrian Lawrence FCA overseeing the mandate — or call 0203 834 9616.
When Should a Business Hire an IT Director?
The most common triggers for an IT Director appointment — drawn from Exec Capital’s experience placing technology leaders since 2018 — include:
- IT complexity has outgrown the current management structure: The business has grown to a point where IT decisions have real commercial consequences — a system failure would disrupt operations significantly, a security breach would be genuinely damaging, and the range of technology the business uses has become too complex to manage without dedicated senior leadership.
- A significant technology project is imminent: An ERP implementation, a cloud migration, a major systems integration following an acquisition, or a digital transformation programme all require senior technology leadership that an IT Manager or an outsourced provider cannot adequately supply. The IT Director brings the strategic oversight, vendor management capability, and organisational authority to deliver complex technology projects.
- Cybersecurity risk has escalated: As cyber threats have become more sophisticated and the regulatory consequences of a breach more severe, businesses increasingly need senior technology leadership that can build and maintain a credible security posture — not just manage the existing tools. An IT Director with a strong cybersecurity background is the appropriate appointment for businesses that have identified technology risk as a board-level concern.
- Private equity investment: PE investors expect a functioning technology governance framework and clear ownership of the technology risk. An IT Director who can represent technology credibly to the investor board, manage the technology workstream in a due diligence process, and deliver the technology elements of the value creation plan is typically a priority hire in the first twelve months of PE ownership. See our private equity recruitment capability for broader context.
- Regulatory compliance requirements: Businesses in regulated sectors — financial services, healthcare, legal, education — face specific technology compliance obligations, including GDPR data protection requirements under the UK Data Protection Act 2018, FCA operational resilience requirements, and sector-specific technology standards. An IT Director with relevant sector compliance experience significantly reduces the risk of regulatory failure.
- Departure of a long-serving IT leader: When an established IT Director or Head of IT leaves — particularly one who has been in post for many years and carries significant institutional knowledge — the gap is often larger than the business anticipates. A fast interim appointment to stabilise the situation, followed by a focused permanent search, is the right response.
What Does an IT Director Do?
The IT Director’s responsibilities span the full range of technology leadership — from day-to-day operational management to long-term strategic planning. The specific scope varies with business size and sector, but the core functional areas typically include:
IT Infrastructure and Operations
The IT Director owns the company’s technology infrastructure — servers, networks, end-user devices, cloud platforms, and the operational systems that keep the business running. They manage the IT team responsible for maintaining and supporting that infrastructure, oversee the helpdesk function, and manage the relationships with outsourced IT providers and managed service partners. Ensuring system availability, performance, and reliability is a fundamental operational accountability — downtime is a business cost, and the IT Director is accountable for minimising it.
Cybersecurity and Risk Management
Cybersecurity has moved from a technical concern to a board-level risk management priority. The IT Director is responsible for the company’s security posture — implementing and maintaining appropriate controls, managing identity and access, overseeing vulnerability assessments and penetration testing, and ensuring the business has a credible incident response capability. They also manage the company’s obligations under the UK GDPR framework maintained by the Information Commissioner’s Office — including data breach notification obligations, data protection impact assessments, and the management of subject access requests.
For businesses in financial services, the FCA’s operational resilience framework places specific obligations on firms’ technology governance — including requirements to identify important business services, map technology dependencies, and demonstrate that operations can be maintained through severe but plausible disruption scenarios. An IT Director with FCA-regulated sector experience understands these obligations and how to meet them.
Technology Strategy and Planning
Beyond operational management, the IT Director is responsible for the company’s technology strategy — ensuring that the IT roadmap is aligned with the business strategy and that technology investment is directed at the areas of highest commercial return. This includes owning the technology budget, managing the capital expenditure approval process for significant technology investments, and providing the board and executive team with a credible view of the technology landscape — what the business currently has, what it needs, and what it should stop spending on.
Digital Transformation and Systems Improvement
Most businesses appoint an IT Director partly because they have one or more significant systems or process improvement programmes they want to deliver. The IT Director leads these programmes — managing the vendor selection process, overseeing implementation, and ensuring that technology investments actually deliver the operational improvements they are designed to create. Failed technology projects are one of the most expensive and demoralising events in any business’s life, and an experienced IT Director who has led ERP implementations, cloud migrations, or digital transformation programmes before brings a significantly higher probability of success than one who has not.
Vendor Management
Most businesses of any scale have a complex portfolio of technology vendors — software licences, managed service providers, cloud platforms, hardware suppliers, and specialist consultants. The IT Director is responsible for the commercial management of those relationships — negotiating contracts, managing service level agreements, rationalising the vendor estate where appropriate, and ensuring the business is not exposed to single points of failure or vendor lock-in that creates commercial risk.
IT Team Leadership
The IT Director manages the internal IT function — recruiting, developing, and retaining the IT team, establishing clear roles and accountabilities, and building a team culture that combines technical rigour with commercial orientation. For businesses whose IT function has grown organically without deliberate structure, the IT Director often needs to redesign the team alongside managing it — defining the appropriate structure for the business’s current scale and trajectory.
Permanent, Interim, or Fractional IT Director?
Permanent IT Director
A permanent appointment is appropriate where the business needs sustained, long-term technology leadership — where the IT function needs a dedicated leader who will build the capability, manage the team, and own the technology strategy over a multi-year horizon. The timetable for a permanent search depends on the seniority of the role and the notice periods candidates are working, and we agree it with you at briefing. Pay depends on business size, sector and role scope — see the market rate section below.
Interim IT Director
An interim appointment is appropriate when the business needs experienced technology leadership for a defined period — covering a departure, managing a specific transformation programme, leading a technology workstream during a transaction, or stabilising the IT function after a difficult period. Exec Capital has an active network of experienced interim IT Directors, many of whom are available at short notice, and urgent requirements are prioritised. For the detail of how interim assignments work, see our dedicated interim IT Director service. For other interim appointments, see our interim executive recruitment service.
Fractional IT Director
A fractional IT Director works with the business on a part-time basis — typically one to three days per week — providing senior technology leadership without the cost of a full-time hire. This model is well suited to businesses that need IT Director-level capability but do not yet have the scale to justify a full-time appointment. A fractional IT Director can establish the technology governance, security posture, and IT strategy that the business needs to operate safely and scale effectively, while the cost is proportionate to the current stage of growth.
Fractional IT Directors are also used by larger businesses to provide specialist oversight for a specific technology domain — cybersecurity, cloud strategy, or enterprise architecture — alongside an existing IT team that has operational capability but not sufficient strategic depth in that area.
For fractional appointments at CTO level, see our fractional CTO page. For fractional CIO appointments, see our fractional CIO page.
Comparing the formats at a glance
If you are still deciding which format fits, the table below compares the four ways Exec Capital places IT leadership. The same comparison applies at CIO level.
| Format | Best for | Commitment | How it is paid | Where to start |
|---|---|---|---|---|
| Permanent IT Director, Head of IT or CIO | Long-term ownership of the technology function, team and strategy | Full-time employment | Salary, bonus and benefits | This page |
| Interim IT Director or CIO | Covering a departure, running a programme, a transaction or a stabilisation | Full-time or near full-time for a defined period | Day rate | Our interim IT Director and interim CIO services |
| Fractional IT Director or CIO | Businesses that need senior technology judgement but not a full-time seat | A set number of days a week or month, ongoing | Day rate or monthly retainer | Fractional C-suite |
| Part-time IT Director | An established role that genuinely needs fewer than five days a week | Regular reduced hours, employed or contracted | Pro-rata salary or day rate | Part-time IT Director |
Other ways to hire an IT Director: if the seat is empty now, start with an interim; if the business needs strategy and governance but not a full-time leader, consider fractional; if the role is established but the workload is lighter, part-time may be the better fit. We regularly run an interim or fractional appointment first and a permanent search behind it, so that the business is never without technology leadership while the right permanent candidate is found.
IT Director Salaries: UK Market Rates
IT Director compensation varies significantly with business size, sector, and the complexity of the technology environment. The most reliable public reference point is the Office for National Statistics. In the ONS Annual Survey of Hours and Earnings (ASHE) 2026 provisional tables, the median gross annual pay for full-time employees classified as information technology directors (SOC 2020 code 1137) was £98,127. That is a median across every kind of employer, from small businesses to large groups, so read it as a mid-point for the occupation rather than a target for your role.
Where an individual package lands against that mid-point depends on a handful of factors we work through with every client at briefing:
- Size and complexity of the estate: multi-site, multi-entity and international operations, or a large application portfolio, push the role towards the top of the market.
- Sector: regulated sectors, where operational resilience, data protection and outsourcing oversight add personal accountability, tend to pay more than the same title in a less regulated business.
- Ownership: in PE-backed businesses the bonus is usually tied to the value creation plan, and senior technology leaders may be offered participation in a management incentive plan.
- Scope: an IT Director who also owns data, digital or a CISO-type security remit is a bigger job than one who runs infrastructure and support.
- Location and working pattern: London and the South East typically carry a premium, and the balance of office, site and remote working affects the candidate pool.
- Interim and fractional engagements: these are priced on a day-rate basis that reflects seniority, sector and the complexity of the assignment, and are agreed engagement by engagement.
For a fuller picture of technology leadership pay, including CTO, CIO and CISO packages, see our technology salary guide.
Any figure is indicative. Actual compensation depends on the candidate’s background, the complexity of the IT environment, the sector, and London weighting where applicable. Exec Capital provides market rate benchmarking as part of every brief. For broader executive compensation context, see our CEO salary guide and CFO salary guide.
Key Qualifications for an IT Director
Unlike the HR Director — where the CIPD provides a clear professional framework — IT Director qualifications are more varied and sector-dependent. There is no single mandatory qualification, but the most commonly held professional credentials include:
- ITIL (Information Technology Infrastructure Library) certification: ITIL is the most widely recognised framework for IT service management in the UK. ITIL Foundation certification is near-universal among experienced IT Directors; ITIL Practitioner or Managing Professional designations indicate a higher level of framework mastery. The AXELOS ITIL certification framework is the current standard.
- CISSP (Certified Information Systems Security Professional): For IT Directors with a strong cybersecurity responsibility, CISSP is the gold standard professional certification — awarded by (ISC)² and requiring both examination and substantial practical experience in information security.
- Prince2 or PMP (Project Management Professional): IT Directors who lead significant technology projects typically hold a recognised project management qualification. Prince2 is more common in UK public sector and enterprise environments; PMP is globally recognised and common in multinational or US-influenced businesses.
- Microsoft, AWS, Google Cloud, or other vendor certifications: Platform-specific certifications are relevant where the business’s technology estate is heavily concentrated in a specific ecosystem. An IT Director overseeing a Microsoft-centric environment will typically hold MCSE or equivalent certifications; one managing a predominantly AWS infrastructure will hold AWS certification.
- Degree in Computer Science, Information Systems, or Engineering: A relevant undergraduate or postgraduate degree is common among IT Directors, though by no means universal — many excellent IT Directors have built their expertise through technical progression rather than academic study.
Beyond formal qualifications, the most valuable characteristic for an IT Director is a combination of technical credibility with the IT team and commercial communication skills with the board — the ability to translate complex technology decisions into business terms that non-technical leaders can make informed decisions about.
What to Look for When Hiring an IT Director
Sector-relevant experience: An IT Director who has managed technology in a regulated financial services business brings specific capabilities — FCA operational resilience compliance, audit trail management, data governance under SMCR — that a candidate from a retail or manufacturing background does not have, and vice versa. The breadth of the technology challenge matters less than the relevance of the experience to your specific context.
Track record of delivering technology projects: Ask specifically about technology projects the candidate has led from inception to completion. What was the scope? What went wrong? How did they recover? What would they do differently? Candidates who have never led a major implementation through the inevitable difficulties of a real project — not just operated within one — are not ready for IT Director-level accountability.
Board communication capability: The IT Director needs to represent technology credibly at board and executive team level — translating technical risk, project status, and investment decisions into language that non-technical leaders can engage with. This is a genuinely rare combination with deep technical expertise, and it is worth testing explicitly in the selection process rather than assuming it from the CV.
Vendor management experience: Most IT environments of any complexity involve multiple vendors, and the quality of vendor management often determines whether technology projects succeed or fail. Ask candidates about specific vendor relationships they have managed — where they have renegotiated contracts, where they have exited a vendor relationship that was not working, and where they have had to escalate to resolve a service failure.
Security mindset: Cybersecurity is no longer a specialist sub-discipline within IT — it is a fundamental responsibility of every IT Director. Candidates who treat security as primarily a technical compliance exercise rather than a genuine operational and commercial risk management priority are not appropriate for the role in the current threat environment. The National Cyber Security Centre’s (NCSC) guidance on cyber security for business provides a useful framework for assessing a candidate’s security thinking during the interview process.
What an IT Director Typically Delivers in the First 90 Days
A new IT Director’s first three months set the tone for the whole appointment. The strongest candidates arrive with a plan for this period, and asking finalists to present theirs — for your business, using information you provide — is one of the most revealing interview exercises we use. A credible first 90 days usually covers five areas.
1. An honest review of the technology estate
The first job is to find out what the business actually has. That means an inventory of systems, infrastructure, end-user devices, cloud subscriptions and licences; a view of where the single points of failure and key-person dependencies are; and an assessment of technical debt — the old systems, unsupported software and undocumented workarounds that carry risk. A good IT Director will also test the basics rather than assume them: whether backups restore, whether disaster recovery arrangements have ever been exercised, and whether the asset register matches reality.
2. A baseline of the cyber security posture
Cyber risk is usually the area boards most want reassurance on, with reason. The UK government’s Cyber Security Breaches Survey 2025/2026 found that 43% of businesses had experienced a cyber security breach or attack in the previous 12 months, rising to 65% of medium businesses and 69% of large ones — yet only 31% of businesses had board-level responsibility for cyber security.
A sensible starting point is to measure the business against Cyber Essentials, which the National Cyber Security Centre describes as the minimum standard of cyber security recommended by the Government for organisations of all sizes. It covers five technical controls, including firewalls and malware protection, and is designed to prevent the most common internet-based attacks. Cyber Essentials Plus covers the same controls but adds independent testing to verify that they work in practice. By the end of the first three months, an IT Director should be able to tell the board where the business stands against those controls — multi-factor authentication, patching, administrator privileges, malware protection and secure configuration — and whether certification is achievable, and on what timetable. If the business sells to the public sector or to larger corporate customers, they should also check whether certification is a condition of those contracts.
3. A review of supplier contracts
Most IT budgets are dominated by suppliers, and most new IT Directors find savings and risks in the contract file. The review should cover every material contract: renewal dates and notice periods, service levels and whether they are being met, exit and data-return terms, data processing agreements under UK GDPR, and concentration risk where one managed service provider controls too much. Unused licences and overlapping subscriptions are common quick wins; contracts that auto-renew on poor terms are a common trap.
4. An assessment of the team
The IT Director needs to know who they can rely on, where the skills gaps are and where knowledge sits with a single person. That usually leads to clearer roles, documented procedures and — sometimes — a recommendation to change the balance between in-house staff and outsourced support.
5. A roadmap and board paper
By the end of the period, the board should have a short, plain-English paper: the current state, the main risks with owners, a prioritised plan separating quick wins from larger investments, a budget, and the governance the IT Director proposes — such as a change control process and a regular technology risk report. In FCA-regulated firms, the plan should also show how technology supports the firm’s important business services and impact tolerances.
What a good first 90 days should not be is a shopping list of new tools. Candidates who propose replacing systems before they have understood them are a warning sign, and we probe for this in assessment.
IT Director Recruitment for Specific Sectors
Financial Services
IT Directors in FCA-regulated businesses operate within a specific regulatory framework that has become significantly more demanding in recent years. The FCA’s operational resilience requirements — which came into force on 31 March 2022, with a transition period that ended on 31 March 2025 — require firms to identify important business services, map their underlying technology dependencies, set impact tolerances, and demonstrate that they can remain within those tolerances through severe but plausible disruption. The IT Director is typically the operational lead for this compliance programme. For broader financial services appointments, see our financial services recruitment capability and our MLRO recruitment page.
Manufacturing and Industrial
Manufacturing businesses face a specific IT challenge in the convergence of operational technology (OT) and information technology (IT) — as production equipment, SCADA systems, and industrial IoT devices become connected to the corporate network, the security and management implications are significant and distinct from a standard office IT environment. An IT Director with OT/IT convergence experience is increasingly valuable in this sector.
Professional Services
Law firms, accountancy practices, and consultancies have specific IT requirements driven by client data security obligations, document management, and the increasingly digital delivery of professional services. The IT Director in a professional services firm typically manages a complex combination of on-premise and cloud systems, a distributed workforce with high expectations of technology reliability, and significant data protection and client confidentiality obligations.
PE-Backed Growth Businesses
Private equity-backed businesses typically need an IT Director who can operate effectively in a high-accountability, data-driven reporting environment while managing the technology changes — new ERP systems, integrations following acquisitions, cloud migrations — that the value creation plan typically demands. They also need to manage the technology workstream in the eventual exit process, where a buyer’s technical due diligence will scrutinise the IT estate, security posture, and technology debt as part of the overall business assessment.
Who We Place IT Directors For
Exec Capital recruits IT Directors, Heads of IT and CIOs for UK businesses that have reached the point where technology leadership has to be a senior, accountable role. The clients we typically work with include:
- Owner-managed businesses making their first senior IT hire, often moving away from an arrangement where the CEO or FD has been making technology decisions with an outsourced provider.
- Private equity-backed portfolio companies that need technology governance, integration capability and an exit-ready estate — see our private equity executive search practice.
- FCA-regulated firms — brokers, wealth and asset managers, lenders, insurers and payments businesses — where operational resilience, outsourcing oversight and data protection add regulatory weight to the role. Our financial services executive search team covers the wider leadership picture.
- Multi-site operational businesses in manufacturing, logistics, distribution, retail, healthcare and care, where systems availability directly affects output and customer service.
- Professional services firms with demanding client confidentiality, document management and remote working requirements.
- Education, charities and not-for-profits that need experienced technology leadership with careful budget stewardship.
- Groups after an acquisition, where two or more technology estates need to be brought together under one leader.
The roles we fill include IT Director, Group IT Director, Head of IT, Director of IT Operations, Head of Infrastructure, IT Director with a security remit, and Chief Information Officer. For the broader range of technology and digital appointments we handle, see our technology and digital leadership recruitment page.
Exec Capital’s IT Director Search Process
- Brief and scoping: We work with the CEO or COO to define the precise scope of the IT Director role — the technology estate, the team structure, the specific projects or challenges the new appointee will face, and the personal characteristics that will work in the specific business culture. We ask specifically about the technology environment — cloud vs on-premise, key systems, major vendor relationships, and any known technical debt or compliance gaps — because these directly determine the candidate profile.
- Candidate identification: We draw on our network of technology leaders — IT Directors, CTOs, and CIOs we have placed or assessed since Exec Capital was founded in 2018 — and conduct targeted outreach to profiles that match the brief. We do not rely on job board applications as the primary source for IT Director searches at this level.
- Technical and commercial assessment: We assess all candidates against both the technical requirements of the role and the commercial communication capability that the board interface demands. We probe specifically for track record in the areas most relevant to the brief — security, transformation, vendor management, or sector-specific compliance — rather than accepting a general technology leadership CV at face value.
- Shortlist presentation: We present two to four candidates with full briefing notes covering their specific relevant experience, our assessment of fit, and any considerations the client should be aware of.
- Interview support and offer: We provide structured interview guidance and manage the offer process, including market rate benchmarking to ensure the compensation package is appropriate and competitive.
Engagement and Fees
We set out our fees in a written proposal once we understand the brief, so that you know the full cost before the search begins. The structure depends on the format of the hire.
Permanent appointments
Permanent IT Director and CIO searches are run on a retained basis. The fee is agreed in advance and paid in stages tied to milestones in the search, which gives the search the dedicated time and direct approach that a senior technology appointment needs. For some Head of IT roles, where the candidate market is broader, a contingent arrangement may be appropriate, and we will say so at briefing. Our guide to retained vs contingent executive search explains the trade-offs.
Interim and fractional engagements
Interim and fractional IT Directors are engaged on a day-rate basis. The day rate you agree covers the interim’s fee and our margin; there is no separate placement fee, and you are invoiced for the days actually worked. Notice periods and any extension terms are agreed up front. Off-payroll working (IR35) status is considered at the outset, and we work through the status determination with you where the rules place that responsibility on the client.
What is included
- A briefing meeting and written role brief, including our view on title, scope and package.
- Market mapping and direct approach to suitable candidates.
- Interviews and written assessments for every shortlisted candidate.
- Help designing the interview process, including case or scenario exercises.
- Referencing, offer management and counter-offer handling.
- Contact with you and the appointee through the early months of the appointment.
There are no hidden charges for advertising, assessment or shortlisting. Terms that apply if an appointment does not work out are set out in our terms of business, and we explain them before you instruct us.
For Candidates: IT Director, Head of IT and CIO Roles
If you reached this page looking for IT Director, Head of IT, CIO or fractional IT Director jobs, please register with Exec Capital so that our team can consider you for permanent, interim and fractional technology leadership roles as they arise. Current vacancies are listed on our opportunities page. Tell us which formats you are open to, the sectors you know and the days you have available if you work on a fractional basis.
Frequently Asked Questions
Do we need an IT Director or can we manage with an IT Manager?
An IT Manager is typically appropriate for businesses with a stable, well-defined IT environment and a relatively modest team. When IT decisions start having material commercial consequences — when a system failure would significantly disrupt operations, when a security breach could be genuinely costly, or when technology investment decisions are being made without sufficient senior oversight — the business needs IT Director-level leadership. The most common signal that the transition is overdue is when the CEO is making significant technology decisions without adequate technical advice.
Should the IT Director sit on the executive team?
For businesses where technology is a primary operational risk or a key strategic enabler, yes. The IT Director needs access to strategic discussions in order to assess their technology implications in real time and plan accordingly. For businesses where IT is genuinely a supporting function with limited strategic impact, the IT Director may report to the COO or CFO without sitting on the executive team. The reporting line should reflect the actual strategic importance of technology to the business rather than a default assumption.
How do we assess cybersecurity capability in an IT Director interview?
The most reliable assessment combines scenario-based questions — describe how you would respond to a ransomware attack; how would you assess our current security posture in your first 30 days — with reference checks specifically targeting security incidents the candidate has managed. The NCSC’s Cyber Assessment Framework provides a structured basis for discussing a candidate’s approach to security governance. Exec Capital can advise on structured interview formats for technology leader assessment.
What is the difference between an IT Director and a Head of IT?
In most organisations, Head of IT and IT Director are used interchangeably for the most senior technology leader. Where a distinction is made, the IT Director typically has a broader strategic remit — advising the board, setting technology strategy, and managing the technology investment framework — while the Head of IT may be more operationally focused. When briefing Exec Capital, the title matters less than a clear description of what the role is accountable for and what authority it carries.
What is the difference between a CIO and an IT Director?
An IT Director typically owns the technology function — infrastructure, systems, security, suppliers and the IT roadmap — and reports to the CEO, COO or CFO. A CIO operates at C-suite level across a larger or more complex organisation, setting information and technology strategy, enterprise architecture and the portfolio of change, usually with IT Directors or Heads of IT reporting to them. In smaller businesses the IT Director covers the CIO remit in practice.
Do you recruit permanent CIOs as well as IT Directors?
Yes. We run permanent CIO searches, largely through direct approach, with board or investor involvement in the final stage. We also place interim and fractional CIOs where the need is immediate or part-time.
How long does IT Director recruitment take?
It depends on the seniority of the role, the strength of the candidate market in your sector and location, and candidates’ notice periods — senior technology leaders often have long notice periods. We agree a realistic timetable with you at briefing, and an interim can hold the role in the meantime if needed.
How much does it cost to recruit an IT Director?
Permanent searches are charged as a retained fee, agreed in advance and paid in stages. Interim and fractional engagements are charged on a day-rate basis with no separate placement fee. We give you a written proposal after the briefing meeting, so the cost is clear before you commit.
Can we hire a fractional IT Director rather than a full-time one?
Yes. A fractional IT Director works a set number of days a week or month and suits businesses that need senior technology judgement — strategy, security governance, supplier management — without a full-time role. Many clients start fractional and move to a permanent appointment as the business grows.
Should our new IT Director get us Cyber Essentials certified?
For most UK businesses, achieving Cyber Essentials is a sensible early objective, because it is the Government-recommended baseline and covers the controls that stop the most common attacks. Whether to go further, to Cyber Essentials Plus or a broader standard, depends on your customers, your sector and your risk profile — a question a good IT Director should answer in their first 90 days.
Hire an IT Director — Permanent, Interim or Fractional
Exec Capital places IT Directors for UK businesses at every stage of growth. We have an active network of IT Director candidates — including specialists in cybersecurity, digital transformation, financial services, and PE-backed businesses. Every search is run by our specialist team, with Adrian Lawrence FCA overseeing each mandate.
Permanent search
Retained search for IT Directors, Heads of IT and CIOs, on a timetable agreed at briefing
Interim placement
Experienced interim IT Directors, with urgent requirements prioritised
Fractional IT Director
Part-time IT Director for businesses not yet needing full-time technology leadership
Related Technology Leadership Appointments
- CTO Recruitment — Chief Technology Officer for technology-led and product businesses
- CIO Recruitment — permanent Chief Information Officer appointments for large or complex organisations are covered in the CIO recruitment section of this page
- Interim IT Director — experienced IT Directors for a defined period or programme
- Part-Time IT Director — senior IT leadership on reduced hours
- CISO Recruitment — Chief Information Security Officer appointments
- Fractional CTO — part-time CTO for technology and product businesses
- Fractional CIO — part-time CIO for enterprise information leadership
- Interim CTO — interim technology leadership for defined periods
- Interim CIO — interim information leadership for transition periods
Related Executive and Director Appointments
- COO Recruitment — Chief Operating Officer appointments
- CEO Recruitment — permanent, interim and fractional Chief Executive appointments
- HR Director Recruitment — people and HR leadership appointments
- Operations Director Recruitment — operational leadership appointments
- Private Equity Recruitment — executive appointments in PE-backed businesses
- Interim Executive Recruitment — interim C-suite and director placements
Sources and Further Reading
- National Cyber Security Centre (NCSC) — cyber security guidance for UK businesses
- Information Commissioner’s Office (ICO) — UK GDPR compliance guidance
- UK Data Protection Act 2018 — statutory data protection framework
- FCA — Operational resilience framework for regulated firms
- AXELOS — ITIL Service Management certifications
- (ISC)² — CISSP and information security professional certifications
- HMRC — IR35 off-payroll working rules for interim IT engagements
- NCSC — Cyber Assessment Framework for evaluating security governance
- NCSC — Cyber Essentials and Cyber Essentials Plus
- DSIT — Cyber Security Breaches Survey 2025/2026
- ONS — ASHE Table 14, earnings by four-digit occupation
The salary figure on this page is taken from the ONS Annual Survey of Hours and Earnings 2026 provisional tables and is indicative only. Actual compensation is agreed on a per-engagement basis. Contact our team for specific market rate guidance.
Need an IT Director, Head of IT or CIO?
Tell us about the role and the problem it needs to solve, and our team will come back with a view on title, format and search approach. You can also contact us directly.
Related Technology Leadership Search Services
Exec Capital places technology leaders on permanent, interim and fractional terms across the UK. Every search is run by our specialist team, with Adrian Lawrence FCA overseeing each mandate.
PRACTICE AREA
Permanent Technology Search
Permanent technology leaders for product, platform and security remits alongside or above the IT function.
PRACTICE AREA
Interim Technology Leadership
Experienced technology leaders to cover a gap, run a programme or stabilise the IT function.
PRACTICE AREA
Fractional & Part-Time
Senior technology judgement for businesses that need it a few days a week rather than full time.
PRACTICE AREA
Data & Digital
Leaders for data, digital and transformation agendas that sit alongside the IT Director or CIO.
→ Digital Transformation Director
→ Chief Data Officer Recruitment
Every search is run by our specialist team, with Adrian Lawrence FCA overseeing each mandate.
About the author
Adrian Lawrence FCA is the founder of Exec Capital. He is a Chartered Accountant holding an ICAEW practising certificate in his own name, with more than 25 years’ experience operating at C-suite level. His background spans private equity-backed businesses, owner-managed companies and listed environments, giving Exec Capital a practitioner’s understanding of what senior leadership hires actually require. View Adrian’s ICAEW profile.