IT Manager Job Description Template (GCC / UAE, 2026)

IT Manager Job Description Template

Use this editable template to post an IT manager role across the GCC. Replace every [bracketed placeholder] with your own details. An IT manager needs no licence in the UAE - so, unlike a regulated engineering role, the filtering power of this JD comes from naming the certifications, the cloud and security depth, and the data-protection responsibilities explicitly. That single move separates true IT managers who can run infrastructure, security and a team from systems administrators who only keep the lights on.

Job Title

IT Manager - [Infrastructure & Cloud / Security / Service Delivery] - [City, e.g. Dubai], [Country]

Job Summary

[Company name] is a [industry] business based in [free zone / mainland location] with [X] employees. We are seeking an experienced IT Manager to own our infrastructure, cloud environment, cybersecurity posture and IT budget. The role reports to the [CTO / COO / Managing Director] and leads a team of [X]. This is a [full-time / contract] position based in [location].

Key Responsibilities

• Own and manage network, servers, endpoints and cloud infrastructure ([AWS / Azure / GCP]).
• Lead the cybersecurity programme: access control, monitoring, patching, incident response and user-awareness training.
• Ensure systems comply with UAE data-protection obligations (Federal Decree-Law No. 45 of 2021, and DIFC / ADGM regimes where applicable).
• Manage IT vendors, software licences, SLAs and the annual technology budget.
• Run IT service management (ITIL) and deliver projects, upgrades and migrations on time.
• Lead, hire, mentor and develop the IT team; set technical standards and documentation.
• Advise leadership on technology roadmap, risk and spend.

Requirements

• Bachelor's degree in Computer Science, IT, Engineering or a related field.
• [X]+ years' IT experience, including [X] years in a management role.
• Hands-on experience with [AWS / Azure / GCP] cloud at production scale.
• Demonstrable cybersecurity ownership and awareness of UAE data-protection obligations.
• [PMP / ITIL / AWS / Azure / CISSP] certification(s).
• UAE / GCC experience and UAE residence visa or transferable status preferred.

Preferred Qualifications

• CISSP or equivalent for security-led roles; PMP for delivery-heavy roles.
• Vendor certifications (Cisco, Microsoft) for infrastructure-intensive environments.
• MBA or equivalent for senior IT-leadership tracks.
• Sector experience matching your business (finance, healthcare, e-commerce, logistics).
• Arabic language ability (a plus for government-linked and local-family employers).

What We Offer

• Competitive salary of AED [X]-[Y] per month (no personal income tax - salary is effectively net).
• Housing and transport allowance [bundled into the gross package / paid separately].
• Employer-sponsored residence visa and Emirates ID (employer-paid by law).
• Mandatory health insurance and end-of-service gratuity per UAE Labour Law.
• Annual air ticket [and family benefits, if applicable].
• [Performance bonus / professional-development and certification budget, if applicable.]

How to Write This JD So It Filters Well

The most common mistake employers make with IT manager JDs is writing a generic 'manage the IT function' advert that attracts senior administrators rather than managers who can own security, cloud and a budget. Because there is no licence to check, the JD itself has to do the filtering:

• Name the cloud platform and the depth. 'Cloud experience' attracts everyone; 'hands-on AWS at production scale, owning cost and architecture' attracts the right people and screens out those who have only touched a console.
• Make security and data protection core duties, not nice-to-haves. Listing the cybersecurity programme and UAE PDPL / DIFC / ADGM obligations as responsibilities separates candidates who have genuinely owned risk from those who treated it as someone else's job.
• Distinguish management from administration. State the team size, the budget and the vendor responsibility so candidates self-select on whether they have actually led, not just operated.
• Treat certifications as a signal, not a gate. PMP, ITIL, AWS, Azure and CISSP are worth requesting, but make clear they do not substitute for demonstrable hands-on experience.
• Publish a salary band. Anchor it: team-lead roughly AED 10,000-16,000, mid-level AED 16,000-25,000, senior/Head of IT AED 25,000-45,000+. Ignore low aggregator 'averages' that blend administrators with managers.

Keep the post concise, lead with the cloud, security and data-protection must-haves, and place the salary band high in the advert rather than burying it.

Common Mistakes to Avoid in an IT Manager JD

• Writing a generic 'manage the IT function' advert. It attracts administrators. The cloud, security, budget and data-protection duties are what make this a manager role - name them.
• Leading with certifications. A CISSP or AWS badge is a useful signal but it does not prove someone has run an incident response or a migration. Make hands-on experience the gate and the certificate the bonus.
• Not stating team and budget scope. 'IT Manager' spans a solo sysadmin-with-a-title and a head of a ten-person team owning a seven-figure budget. State the scope so the right seniority applies.
• Ignoring data protection. In finance, healthcare and data-heavy businesses, PDPL / DIFC / ADGM awareness is a real differentiator; say whether it is required or preferred rather than leaving it unsaid.
• Hiding the pay band. Inflated 'IT Manager' titles mean wide salary expectations; a published band anchors them and cuts wasted interviews.

Adapting the Template Across the GCC

The structure travels across the GCC with a few substitutions. First, swap the nationalisation programme: Emiratisation and Nafis become Saudisation (Nitaqat) and the relevant Saudi platforms in Saudi Arabia, Qatarisation in Qatar, Omanisation in Oman, and Kuwaitisation in Kuwait - and the wage-protection mechanism differs by country, so name the local equivalent rather than 'WPS' outside the UAE. Second, swap the data-protection reference: cite Saudi Arabia's PDPL, Qatar's data-protection law or the relevant Bahrain or Oman regime rather than the UAE's Federal Decree-Law No. 45 of 2021, since data-residency and localisation rules differ materially across the GCC and quoting the wrong country's law undermines your credibility with exactly the security-literate candidates you want. The core shape holds everywhere: a GCC IT manager is hired for infrastructure and cloud ownership, security leadership and local data-protection command, so those duties belong at the top of the advert in every market, with the salary band adjusted to local benchmarks. One practical caution when reusing this template across borders: do not carry UAE-specific figures (the AED 9,000 Emiratisation contribution, the 85 percent WPS threshold) into a non-UAE advert, since those numbers are jurisdiction-specific.

Where to Post and How to Brief Your Recruiter

A well-written JD is only half the job; where you post it and how you brief on it determine the quality of the shortlist. For an IT manager role, lead with niche and regional boards that concentrate GCC-based, work-authorised technology candidates, and supplement with LinkedIn for passive mid-to-senior cloud and security profiles who are not actively applying. When you hand the role to an internal recruiter or an agency, brief them on the three things this JD is built to filter for, because a recruiter who screens on keywords alone will pass through senior administrators who match the certifications but not the scope. First, tell them the real seniority: the team size, the budget and whether this person owns security and architecture or merely operates them. Second, give them one disqualifying question to ask on the first call - for example, 'describe the last security incident you personally owned end to end' - so the obvious mismatches are filtered before they reach your panel. Third, set the salary band explicitly so the recruiter does not waste time on candidates whose expectations sit above or below it. Finally, decide up front how you will verify certifications and hands-on depth: state in the brief that PMP, ITIL, AWS, Azure or CISSP claims will be checked against the issuing body and that a short technical scenario forms part of the process, so candidates self-select honestly and your shortlist arrives pre-qualified rather than merely keyword-matched.