Computer and Information Systems Manager: Duties, Degrees and Pay

Computer and information systems managers plan, coordinate and direct computer-related work in an organization. The median pay is $175,140 a year as of May 2025, and the Bureau of Labor Statistics (BLS) lists a bachelor’s degree as the typical entry-level education. For someone with a cybersecurity degree, this is the leadership end of the field.

What Does a Computer and Information Systems Manager Do?

Think of this person as the one who decides what technology an organization needs and makes sure the people running it have what they need. BLS describes the role as planning, coordinating and directing computer-related activities.

The duty list is practical. Managers analyze their organization’s IT needs and recommend upgrades. They plan and direct the installation and maintenance of computer hardware and software. They assess the costs and benefits of new projects and justify funding for them.

People come next. Managers determine personnel needs for their department and direct the work of other IT staff, including computer systems analysts, software developers, information security analysts and computer support specialists. They also negotiate with vendors and monitor them to keep performance high.

Security sits on that list in plain words. Managers establish and maintain processes to detect, prevent and mitigate IT security threats. That one line is why a cybersecurity background fits so well.

Why Does a Cybersecurity Degree Point Toward Management?

Most security work is hands-on at the start. Over time, some people find they want to decide what gets protected, how much to spend and who does the work. That is the manager’s job.

A cybersecurity degree gives you the technical vocabulary to lead people who do the work. You can judge whether a vendor’s claim makes sense, and you can explain a risk to executives who don’t read logs. Those are the moments when a manager earns trust.

The analyst role is often where the path starts. Our information security analyst career guide covers it. The federal wage survey puts the analyst median at $129,180, while the manager median is $175,140, so the move up the ladder is visible in the numbers.

None of this happens automatically. The wage survey shows what each job pays, not how fast people move between them, and we won’t guess at a timeline.

Which Degree Levels Fit This Career?

BLS lists “Bachelor’s degree” as the typical entry-level education and says graduate school is not required. So a bachelor’s is the baseline, and a master’s is an option that some people choose for depth in leadership topics.

The programs on this site span four levels: associate, bachelor’s, master’s and doctorate. For this career, the bachelor’s and master’s levels matter most. Our online bachelor’s in cybersecurity list covers the standard route, and the online master’s in cybersecurity list suits people who already hold a bachelor’s degree.

An associate degree can start you in IT, and you can build toward a bachelor’s later. Our online associate degrees in cybersecurity list shows the lower-cost entry point.

What Kind of Program Prepares You to Lead?

Look for programs where management is part of the course list, not an afterthought. Our online cybersecurity management degrees list collects them, and it spans associate through doctoral levels.

At the master’s level, Champlain College’s Master of Science in Cybersecurity Management is 30 credits at $608 a credit, for a total tuition of $18,240. Courses include Managing Risk in IT Organizations, Security Regulations and Compliance Management, and Technology Leadership for Innovation and Growth. It ends with an IS Management Capstone.

Murray State University’s Master of Science in Cybersecurity Management is also 30 credits, with a published total of $18,180. Its list includes Information Security Program Management and Cybersecurity Program Governance, Risk and Compliance. Its capstone has students work with industry partners on a cybersecurity program proposal.

Those courses line up with the BLS duty list: funding, staffing, vendors and security processes. The University of Maryland Global Campus master’s in cybersecurity management and policy is a third example, at 30 credits and $20,820 in total tuition.

Are There Bachelor’s Options That Mix Business and Security?

Yes, and they suit people starting from scratch. The University of Maryland Global Campus bachelor’s in cybersecurity management and policy is 120 credits with a Cyber Management and Policy Capstone. Total tuition is $59,880, or $40,440 for in-state students.

Columbia Southern University offers a Bachelor of Science in Business Administration with a Cybersecurity Concentration. It is 120 credits at $278 a credit, for a total of $33,360. A business degree with a security concentration leans toward the budgeting and planning side of the manager’s duties.

The two options differ in focus. One is security first, with a management lens. The other is business first, with security as the concentration. Choose based on which half of the job you want to be strongest at.

Ask each school about hands-on work, too. A manager who has configured a firewall once, even in a lab, speaks differently about it than one who hasn’t.

Which Certifications Matter for This Path?

Certifications for managers are about leading security programs, and the issuers set experience bars that a degree alone doesn’t meet.

ISACA’s Certified Information Security Manager (CISM) is the clearest fit. ISACA asks for five or more years of professional work experience across at least three of the four CISM domains, gained within the 10 years before you apply. The exam fee is US$575 for members and US$760 for non-members, and renewal needs 120 continuing education hours over three years. Our CISM certification guide covers the details.

The ISC2 Certified Information Systems Security Professional (CISSP) is the other common choice. It requires five years of cumulative, full-time experience in two or more of its eight domains. A bachelor’s or master’s degree in computer science, IT or a related field can satisfy up to one year. See our CISSP requirements guide.

Some degree programs prepare you for these exams. Twenty-four programs we compare name CISSP preparation and 4 name CISM preparation. Our online cybersecurity degrees with certifications list shows which ones.

The wage survey doesn’t tie any certification to a pay figure, so treat them as proof of knowledge, not a guaranteed raise.

How Much Do Computer and Information Systems Managers Earn?

The national median is $175,140 a year, which is $84.20 an hour. The mean is $192,160. The 25th percentile is $138,060 and the 75th percentile is $220,730.

At the edges, the lowest-paid tenth earn $107,550 or less, and the highest-paid tenth earn $297,510 or more. That spread is wide, and it reflects the range of organizations that hire managers, from small teams to large enterprises.

By state, California has the highest average at $238,440, followed by New York at $223,590, Washington at $222,510, Massachusetts at $218,740 and Virginia at $206,920. Those are means, which run above medians where a few salaries are very high.

Our computer and information systems manager salary page goes deeper on state medians, the percentile ladder and how this role compares with analysts.

Where Are the Jobs?

BLS counts 670,570 managers in the wage survey. California employs the most at 94,720. Texas has 73,060, New York has 48,050, Florida has 35,040 and New Jersey has 34,470.

In its job projections, BLS puts employment at 685,800 in 2025. It expects 108,100 more jobs by 2035, which is 16 percent growth and much faster than average. It also expects about 53,500 openings each year, counting people who retire or change careers.

Big states give you many employers to choose from. Smaller states have fewer, so a move can mean a move of location or a remote arrangement. Remote policies vary by employer, so ask before you assume.

How Does the Manager Role Differ From the Analyst Role?

The two jobs sit next to each other, and the BLS duty lists show where they split. An analyst monitors networks, checks systems for weak points and writes reports on attacks. A manager decides which of those jobs the organization funds, who does them and which tools support them.

The manager’s list also reaches past security. It covers hardware and software installation, project costs, vendor performance and staffing for the whole department. Security is one duty among several, though it is the one a cybersecurity graduate already knows best.

Pay reflects the difference. The manager median of $175,140 is above the analyst median of $129,180, and the manager 90th percentile of $297,510 is above the analyst 90th percentile of $199,850.

Many people find the shift comes gradually. You begin writing the recommendations, then you begin approving them, and eventually you are the one who justifies the funding. A degree that includes management coursework gives you practice before the title arrives.

What Skills Does the Job Reward?

Read the duty list as a skills list. Analyzing IT needs takes curiosity about how the business works. Justifying funding takes plain writing and simple math. Directing staff takes patience and clear expectations.

Vendor negotiation is a skill many technical people haven’t practiced. It means reading a contract, asking what happens when something breaks, and knowing when to walk away.

Security knowledge ties these together. When you set up processes to detect, prevent and mitigate threats, you decide who has access, how incidents get reported and how quickly the team responds. A manager who understands the technical side makes those decisions faster and with fewer surprises.

What Are the Downsides?

Managers carry responsibility for outcomes they don’t control directly. If a breach happens on your watch, you answer for it, even when a team member made the mistake. BLS doesn’t publish how often managers handle after-hours incidents, so ask employers about it.

The work also shifts away from hands-on technology. Some people miss building and fixing things, and they find the budget meetings and staffing decisions less satisfying. If you love the technical side, a senior engineering or architecture role may suit you better.

Finally, the duties cover a lot of ground at once. Costs, people, vendors and security all land on one desk. If you like variety, that is a plus. If you prefer a narrow focus, it can feel scattered.

How Do You Get Started With an Online Program?

Start with where you are today. If you have an IT background and a bachelor’s degree, a management-focused master’s program is a direct fit. If you are starting out, a bachelor’s degree gives you the BLS typical entry-level education.

Compare what matters to you. Many master’s programs we compare don’t require the GRE, and our online master’s in cybersecurity with no GRE list shows them. Our online cybersecurity degrees for working adults list covers flexible schedules.

While you study, practice the manager’s habits. Write a one-page recommendation for a technology purchase, build a simple budget for a project, and explain a security risk to a friend who isn’t technical. Those small projects show up well in interviews.

When you are ready to compare, begin with the online cybersecurity management degrees list and narrow by price, delivery and level.