JobDescription.org

Public Sector

Assistant Director of Information Services

Last updated

The Assistant Director of Information Services oversees a government agency's information technology operations and digital service delivery — infrastructure, applications, cybersecurity, help desk, and technology project management. They manage IT staff and service contracts, direct major technology initiatives, and ensure that systems supporting government operations are reliable, secure, and compliant with applicable requirements.

Role at a glance

Typical education
Bachelor's degree in CS, IS, or related field; Master's (MPA/MBA) preferred
Typical experience
10-15 years total, with 3-5 years in management
Key certifications
CISSP, PMP, ITIL Foundation, CISM
Top employer types
Local/State government, Federal agencies, Government consulting firms, Tech vendors for public sector
Growth outlook
High demand due to persistent talent gaps and escalating cybersecurity threats
AI impact (through 2030)
Augmentation and expanded demand — AI increases the complexity of the threat landscape and necessitates advanced management of automated digital services and cloud-based data governance.

Duties and responsibilities

  • Oversee IT infrastructure operations including servers, networks, storage, and cloud environments supporting government operations
  • Direct application support and development for enterprise systems — ERP, CRM, GIS, public-facing digital services
  • Manage cybersecurity programs: risk assessment, incident response, security awareness training, and compliance monitoring
  • Lead technology project planning and delivery, applying project management frameworks to major system implementations
  • Supervise IT division managers, systems administrators, developers, analysts, and help desk supervisors
  • Manage IT vendor contracts and procurement, ensuring appropriate competitive processes and contract performance oversight
  • Develop and maintain the IT strategic plan, technology roadmap, and capital improvement program for information systems
  • Ensure compliance with state and federal IT security requirements, privacy regulations, and records retention obligations
  • Manage the IT operating and capital budget, tracking expenditures and making budget recommendations
  • Brief senior leadership and elected officials on major technology initiatives, cybersecurity posture, and digital service improvements

Overview

The Assistant Director of Information Services is accountable for the technology that keeps government running. When the ERP system goes down at the end of a fiscal year, when a ransomware attack encrypts city files, when a major permit processing system needs to be replaced, this person is in the room responsible for the response or the project. It's a role that combines technical depth with organizational management — and in government, it operates under public accountability that private sector IT managers rarely experience.

Operations management is continuous. Government IT departments run infrastructure that cannot tolerate significant downtime — public safety systems, financial systems, permit and licensing applications, and now an expanding portfolio of digital public services that residents and businesses depend on. Keeping that infrastructure running reliably requires both well-managed maintenance cycles and a team capable of rapid response when things go wrong.

Cybersecurity has become the dominant concern. Government entities are high-value targets for ransomware groups, nation-state actors, and opportunistic attackers. The consequences of a successful attack — disrupted public services, breached personal data, months of recovery — are severe and increasingly public. The assistant director manages the security program: assessments, patching and vulnerability management, security awareness training, incident response planning, and the ongoing decisions about where to invest in defenses against a constantly evolving threat environment.

Technology modernization projects are the highest-profile work. Replacing a decades-old legacy system — a financial management system from the 1990s, a permitting system built before smartphones — requires project management, stakeholder engagement with dozens of dependent departments, vendor selection and negotiation, data migration, staff training, and change management. These projects run over years, consume significant capital, and are politically visible. Managing them to successful completion is the work that builds or destroys an IT director's reputation.

Digital service delivery has expanded from a nice-to-have to an expectation. Residents expect to apply for permits online, pay utility bills through a mobile app, and report service issues through a digital channel. The assistant director manages the portfolio of digital services — their reliability, security, and continuous improvement — and evaluates new service delivery investments against both cost and resident experience.

Qualifications

Education:

  • Bachelor's degree in computer science, information systems, or a related technical field
  • Master's in information systems, public administration, or business administration (MPA or MBA with IT focus) for senior positions
  • Technical depth matters: candidates without it struggle to manage technical staff effectively

Certifications:

  • CISSP (Certified Information Systems Security Professional) — the most important credential for current IT leadership roles
  • PMP (Project Management Professional) — valued for roles with significant technology project delivery responsibility
  • ITIL Foundation — IT service management framework widely used in government IT
  • Cloud platform certifications: AWS Solutions Architect, Microsoft Azure Administrator, Google Cloud Professional
  • CISM (Certified Information Security Manager) — management-focused security credential

Experience benchmarks:

  • 10–15 years of progressively responsible IT experience, including at least 3–5 years in IT management
  • Track record of successfully delivering major technology implementations
  • Direct experience managing cybersecurity incidents or leading security program development
  • Government IT experience is valued but not required — private sector IT management with understanding of public sector constraints

Technical domains (depth in some, breadth in all):

  • Infrastructure: servers, networking, storage, virtualization, cloud platforms
  • Application management: ERP, GIS, CRM, digital services, integration platforms
  • Cybersecurity: NIST CSF, CIS Controls, SIEM, vulnerability management, incident response
  • Project delivery: PMI methodology, Agile/Scrum for software development projects
  • IT procurement: RFP development, technical evaluation, contract terms for IT services

Regulatory and compliance environment:

  • FISMA (Federal) or state equivalent
  • CJIS (Criminal Justice Information Services) for agencies with law enforcement systems
  • HIPAA for agencies managing health data
  • PCI DSS for agencies processing payment card transactions
  • State privacy laws and data breach notification requirements

Career outlook

Government IT leadership is in high demand and faces a persistent talent gap. The combination of public sector salary constraints and the technical skill requirements creates chronic recruitment difficulty for government IT departments — particularly in markets where private sector tech employers compete for the same talent. Experienced IT managers with government context knowledge are especially valuable.

Cybersecurity is the driving factor in IT spending and staffing decisions. The escalating threat environment — documented by annual CISA advisories, FBI ransomware incident reports, and state and local government breaches that have made headlines — has elevated IT security from a technical function to an executive concern. Governments that previously treated IT security as a narrow technical specialty are now investing in security programs, hiring CISOs, and recognizing that cybersecurity leadership is a board-level issue.

Cloud migration is creating a significant skills transition. Government IT staff trained on on-premise infrastructure management need to develop cloud operations skills, and the management of cloud environments requires different governance and cost management approaches than traditional data centers. IT leaders who can manage hybrid environments and guide their organizations through cloud migration are in sustained demand.

Digital transformation initiatives — modernizing legacy systems, improving digital service delivery, building data analytics capability — are consuming significant IT leadership capacity. Many local and state governments are in the early phases of modernizations that will run for the next decade, and the assistant directors and directors managing those programs are in high-visibility roles with real career exposure.

The career path runs from assistant director to CIO, Chief Information Officer, or Director of IT. In larger jurisdictions, the CIO reports to the city manager or county administrator and sits at the same organizational level as major department directors. Federal CIO positions in major agencies are among the highest-profile technology leadership roles in government. Private sector options include technology leadership at companies with significant government business or at consulting firms serving government clients.

Sample cover letter

Dear Hiring Manager,

I'm applying for the Assistant Director of Information Services position with [City/County/Agency]. I've been IT Operations Manager for [Organization] for five years, managing a team of 22 IT professionals across infrastructure, applications, and help desk functions, with an operating budget of $4.8M and capital project responsibility for approximately $3M annually.

The project I'm most proud of is our ERP replacement — a three-year initiative that I managed as project lead after the previous implementation stalled. I rebuilt the vendor relationship, restructured the project governance to include biweekly executive steering committee sessions with data, not status narratives, and recovered a schedule that was 14 months behind. We went live on the revised timeline with all critical functionality, and the system has been stable since go-live with no major incidents.

On cybersecurity, I hold the CISSP and have built our security program from a reactive posture to one with documented controls, a tested incident response plan, and annual penetration testing. We joined the MS-ISAC two years ago and have used their threat intelligence feeds and incident response support twice — once for a phishing campaign that was broader than our initial assessment and once for a third-party software vulnerability that required rapid patching. Having the MS-ISAC relationship in place made both responses faster.

I'm drawn to government IT specifically because the public trust dimension of this work matters to me. When a government system fails, real people experience real consequences. I want to lead an IT function where that accountability is clear.

I'd welcome the opportunity to discuss the position.

[Your Name]

Frequently asked questions

What certifications are most valued in government IT management?
The CISSP (Certified Information Systems Security Professional) is the leading cybersecurity credential and is increasingly expected at the IT director and assistant director level as cybersecurity threats to government systems have escalated. The PMP (Project Management Professional) is valuable for roles overseeing major technology implementations. Cloud certifications (AWS, Azure, Google Cloud) are relevant as government IT shifts to cloud infrastructure. ITIL Foundation is a baseline IT service management credential valued in operations-focused roles.
What cybersecurity frameworks do government IT departments use?
Most government IT departments use the NIST Cybersecurity Framework (CSF) as a common framework for assessing and improving security posture. Federal agencies also follow FISMA requirements and NIST Special Publications (SP 800 series). State and local governments increasingly follow CIS Controls as a practical implementation guide. The MS-ISAC (Multi-State Information Sharing and Analysis Center) provides threat intelligence and incident response support specifically for state and local governments at no cost.
How do government IT departments handle procurement differently from private sector?
Government IT procurement must follow competitive bidding requirements — typically formal RFP processes for significant technology investments. The procurement timeline is longer than private sector, and contract terms are more constrained by statute and regulation. Federal procurement uses FAR (Federal Acquisition Regulation); state and local procurement follows state purchasing codes. IT-specific contracts often use cooperative purchasing agreements (NASPO ValuePoint, GSA schedules) to streamline procurement while meeting competition requirements.
What is the current state of cloud adoption in government IT?
Federal government cloud adoption is required by policy for most new systems (cloud-first or cloud-smart mandates). State and local adoption varies widely. Most progressive government IT departments have migrated infrastructure to IaaS platforms (Azure Government, AWS GovCloud), adopted SaaS for productivity and collaboration (Microsoft 365, Google Workspace), and are evaluating modernization of legacy on-premise applications. Cloud migration improves resilience and reduces maintenance burden but requires new skills, governance, and contract management approaches.
How is AI affecting government IT operations?
AI-assisted cybersecurity tools — threat detection, anomaly analysis, automated response — are being adopted by well-resourced government IT departments. AI chatbots are handling routine help desk inquiries. AI coding assistants are being piloted for application development teams. Generative AI tools present both productivity opportunities and governance challenges — data privacy concerns, acceptable use policies, and the risk of sensitive government data entering commercial AI training sets. Government IT leaders are navigating adoption decisions that balance productivity gains against real governance risks.
See all Public Sector jobs →