by The Computing Australia Group | 
As a business grows, technology decisions pile up: which systems to keep, what to replace, how much to spend and how to stay secure. Yet often nobody owns those decisions, so they get made in a hurry or not at all. An external IT manager gives you that ownership without the cost of a full-time senior hire.
This guide explains what an external IT manager does, how the role compares with hiring in-house, the signs you need one, and how we provide one as part of our managed IT services.
Updated 2 November 2026
What’s changed for IT management in 2026
- ASD Essentials published (15 Oct 2026). ASD’s new security baseline succeeds the Essential Eight, giving businesses a clear set of controls to plan and budget around.
- Ransom payments must be reported (since 30 May 2025). Businesses with annual turnover above $3 million must report a ransomware or cyber extortion payment to ASD within 72 hours, so incident plans need a named owner.
- Windows 10 is out of support (14 Oct 2025). PCs not covered by paid Extended Security Updates no longer receive security fixes, which makes device lifecycle planning urgent.
- Guidance for AI Adoption (21 Oct 2025). The National AI Centre’s six essential practices start with deciding who is accountable for AI, a natural job for whoever manages your IT.
What does an external IT manager do?
An external IT manager takes responsibility for how technology supports your business. Rather than fixing individual problems, they plan, prioritise and coordinate, and they keep leadership informed. In practice, the role covers six main areas.
Strategy and roadmap
Turns business goals into a practical IT roadmap, so investments happen in the right order rather than in a rush.
Budgets and lifecycle
Plans spending and replacements, for example moving remaining Windows 10 PCs onto supported devices before they become a risk.
Vendors and licences
Manages suppliers, contracts and software licences, so you pay for what you use and hold vendors to their commitments.
Security and risk
Sets priorities against a recognised baseline such as ASD Essentials, and makes sure your incident plan says who does what, including any ransomware reporting.
Projects and change
Scopes and oversees projects such as cloud moves, new systems or office fit-outs, and keeps them on track.
Reporting and AI governance
Reports to leadership in plain English, and owns decisions about AI tools, from Copilot readiness to an AI use policy.
In-house, contractor or managed IT with an IT manager?
In general, there are three common ways to fill the role. Each, however, suits a different stage of growth.
| In-house IT manager | Freelance contractor | Managed IT with an external IT manager | |
|---|---|---|---|
| Best for | Larger organisations with complex, full-time needs | Short projects or interim cover | Growing businesses that need ongoing ownership and support |
| How you pay | Salary plus on-costs, training and recruitment | Hourly or day rates | An ongoing fee that also covers support and monitoring |
| Breadth of skills | One person’s experience | One person’s experience | Backed by a team across help desk, security, cloud and AI |
| Continuity | Gaps during leave or turnover | Ends with the engagement | Cover and documentation built in |
If cost is the deciding factor, our articles on what drives the cost of managed IT and how outsourcing saves money go into detail.
Signs you need an external IT manager
In most cases, businesses don’t decide to get an IT manager; instead, they notice the symptoms of not having one. In particular, watch for these signs:
- IT decisions land on the owner, the office manager or whoever is most “techy”.
- Spending is reactive, with surprise purchases and renewals.
- Nobody can say which devices, accounts and licences you have.
- Customers, insurers or auditors ask security questions you can’t answer.
- Projects stall because nobody has time to run them.
- Staff are trying AI tools, but there is no policy or plan.
How an external IT manager works with your team
Above all, a good arrangement follows a steady rhythm. Typically, it moves through three stages.
Get to know the business
Review your systems, risks, contracts and goals, often starting with an IT review.
Set the plan
Agree a roadmap, a budget and security priorities, and confirm who is responsible for what.
Run and report
Manage vendors and projects day to day, then meet regularly to review progress and adjust the plan.
Security, compliance and AI governance
Of course, security is where clear ownership matters most. An external IT manager keeps your controls aligned with a baseline such as ASD Essentials, schedules reviews and makes sure your incident plan names who contacts whom. For example, if your turnover is above $3 million, someone must know how to report a ransomware payment to ASD within 72 hours.
Meanwhile, AI adds a newer responsibility. The Guidance for AI Adoption recommends deciding who is accountable for AI, understanding its impacts and keeping people in control. In many businesses, that naturally sits with whoever manages IT. Our cyber security services and AI consulting and automation team support both areas.
Choosing an external IT manager
Look for more than technical skill. Before you commit, check that your external IT manager:
- Understands your business. They ask about goals, customers and growth plans, not just your servers.
- Has a team behind them. Support, security, cloud and AI specialists are available when needed.
- Communicates plainly. Reports and recommendations make sense to non-technical leaders.
- Plans ahead. They provide a written roadmap and budget, not just fixes.
- Documents everything. Your systems, accounts and decisions are recorded and belong to you.
For a broader checklist, see our guide to choosing a managed service provider.
How we provide an external IT manager. For our managed IT clients, a named contact acts as your external IT manager. They plan your roadmap and budget, manage vendors and licences, set security priorities and report to your leadership team. In addition, behind them sits our wider team, from the help desk to security, cloud and AI specialists, so advice turns into action. Find out more about our managed IT services.
Managed IT in Perth
Get an IT manager on your side
With 21 years of IT experience and a Perth team in Belmont, we help businesses plan, secure and run their technology. Tell us where IT is slowing you down, and we will suggest a practical next step.
Frequently asked questions
What does an external IT manager cost?
It depends on the size of your business, how many systems and users you have, and how much hands-on support you need. Because we include the role in our managed IT services, the cost sits within one ongoing fee rather than a separate salary. Our article on managed IT costs explains what drives the price.
Is an external IT manager the same as a virtual CIO?
In short, they overlap. A virtual CIO usually focuses on high-level strategy, while an external IT manager also handles day-to-day planning, vendors and coordination. For most small and medium businesses, one role covers both.
Can an external IT manager work with our in-house IT person?
Yes. An external IT manager can guide and support an internal staff member, take on the planning and vendor work, and provide cover when they are away.
Security and getting started
Is outsourcing IT management secure?
Yes, when it is set up properly. Your provider should use multi-factor authentication, least-privilege access and documented processes, and you should keep ownership of your accounts and data.
How often will we meet?
That depends on your needs. Generally, most businesses benefit from regular planning reviews, with day-to-day contact in between whenever decisions come up.
How do we get started?
To begin with, have a conversation about your goals and current setup. From there, an IT review shows where you stand and what to prioritise first.
Sources and further reading
- ASD — ASD Essentials
- ASD’s ACSC — Ransomware and cyber extortion payment reporting
- Microsoft Learn — Extended Security Updates for Windows 10
- Department of Industry, Science and Resources — Guidance for AI Adoption
This guide is general information, not legal advice. Last reviewed 2 November 2026.
About the author
Chris Karapetcoff
Director (Client Growth and Success), The Computing Australia Group
Chris has worked with The Computing Australia Group for over 20 years and looks after its client relationships. He helps organisations get outstanding value from their IT spend, with plain-English advice and a complete IT solution they can build on. As he tells every client: your IT system should just work.
