Back to Blog

    In-House IT Hire vs. Outsourced MSP: A CFO's Worksheet

    10 min read
    compliancesmall-businessmanaged-itcyber-insuranceagility-365

    Most growth-stage CEOs hit a wall at 40 or 50 employees and reach for the same lever. They post a job for an IT Director or IT Manager. They expect that one hire will fix the problem.

    It doesn't. About 80 percent of the time at the 20 to 100 person stage, that hire is the wrong move, or at minimum the wrong shape of move. The hire I see work well is a CTO who is fundamentally a business leader and happens to have technical depth. The hire I see fail is the senior technician you promoted into a director title because you needed someone to "own IT."

    Let me walk you through what your CFO would build if you handed her the problem. The math is unsentimental. It's also clarifying.

    What the in-house hire actually costs

    Start with the full loaded cost of a single IT Director hire in 2026 in a mid-tier US market.

    • Base salary: $95,000 to $135,000 depending on experience and city
    • Benefits (health, dental, 401k match, payroll taxes): about 25 to 30 percent of base
    • Loaded cost per year: $120,000 to $175,000
    • Plus a sign-on bonus on the high end: another $5,000 to $15,000
    • Plus the cost of the recruiting effort itself: $10,000 to $25,000 if you use a recruiter, lower if internal

    So you're at $135,000 to $215,000 in total first-year outlay for one person.

    That person is one person.

    What one person can actually cover

    The IT function at a 50-person company has seven concurrent responsibilities running in parallel. I covered them in the pillar; here they are again because the worksheet depends on them.

    1. Hardware lifecycle (procurement, deployment, refresh, disposal)
    2. Software licensing (Microsoft 365, the long tail of seat-based subscriptions, renewals)
    3. Support labor (the broken laptop, the new hire onboarding, the password reset)
    4. Security (endpoint, email, identity, monitoring, response)
    5. Compliance and risk (backups, retention, incident response, the underwriter questionnaire)
    6. Identity and access (provisioning, deprovisioning, audit)
    7. Management overhead (vendor relationships, contracts, billing, reporting)

    A senior technician is excellent at categories 1, 2, and 3. They're competent at 4 if they came from a security background. They're usually mediocre at 5 and 6 because those are program-management skills, not technical skills. They have no time for 7 because they're heads-down on the queue.

    Even an outstanding IT Director cannot simultaneously be the help desk and the security program lead and the compliance manager and the vendor relationship owner. The math of one person versus seven jobs doesn't work even if the person is exceptional.

    So what actually happens in practice: the hire covers categories 1, 2, and 3 well. Categories 4 through 7 get whatever time is left over, which is approximately none. The business looks like it has IT. It does not have an IT function. Those are different things.

    What the worksheet looks like

    Hand the problem to a CFO and you get three columns.

    Column A: One IT Director, no other support.

    • Year 1 loaded cost: $135,000 to $215,000
    • Effective coverage of the seven categories: 1, 2, 3 (mostly), some of 4
    • Risk position: high. Single point of failure on a single person.
    • When they take vacation or leave: your IT function pauses or stops.
    • Hidden cost: the work in categories 5 through 7 that goes undone shows up as compliance fines, insurance premium spikes, security incidents, or vendor billing surprises. CFO's best guess: $30,000 to $80,000 a year in undetected and unbudgeted cost.

    Column B: One IT Director plus an outsourced MSP for specialty work.

    • Year 1 loaded cost: $135,000 to $215,000 for the hire, plus $4,000 to $10,000 a month for the MSP doing security, compliance, and 24/7 monitoring
    • Annual total: $185,000 to $335,000
    • Effective coverage: all seven categories
    • Risk position: moderate. The MSP backstops categories 4 through 6, the hire owns 1 through 3 plus management.
    • When the hire takes vacation: MSP picks up. When the hire leaves: MSP carries until you backfill.

    Column C: Outsourced MSP only, no internal IT hire.

    • Year 1 loaded cost: $10,000 to $15,000 a month for a full all-inclusive managed service at the 50-user size
    • Annual total: $120,000 to $180,000
    • Effective coverage: all seven categories
    • Risk position: low. Multiple humans on the account, redundancy by design.
    • When anyone takes vacation: somebody else covers. Nobody leaves and takes the institutional knowledge.

    Three numbers, three risk profiles, and very different shapes.

    Why Column C wins for most growth-stage companies

    The instinct against Column C is usually one of two things. Either the CEO has been burned by a bad MSP before, or they fundamentally want a hire on the org chart so somebody is "ours."

    I take the burned-before objection seriously. There are a lot of mediocre managed service providers, and a bad one is worse than no MSP at all. The diligence question is whether you can find a credible one. The market for managed services for 20 to 100 person companies has matured enough that the answer is usually yes if you ask the right questions. (I'll come back to those questions in a minute.)

    The org-chart objection deserves a harder look. The intuition is "we want our own person who's accountable to us." That's reasonable. But what you're describing is a team relationship, not a single hire. The right way to scratch that itch is to demand that your MSP assigns a dedicated technical account manager who functions as your IT director by proxy. Two or three named humans you talk to on a first-name basis, who know your environment, who show up for your QBR, who you can call by cell if needed. That's the model that works. The "we hired Steve" model creates the illusion of accountability and the reality of a single point of failure.

    The companies that do best at the 20 to 100 person stage hire a CTO instead. That's a different shape of person. A CTO is a business leader who happens to understand technology, not a technician promoted into a director title. They set strategy, they don't run the help desk. The CTO works with the MSP. They don't replace it. Total cost: $180,000 to $260,000 loaded for the CTO, plus the bundled MSP cost. About $310,000 to $440,000 a year for the function. Worth it when the company has grown to the point that there are real technology decisions to make at the executive level. Usually not before 75 to 100 employees.

    The hidden cost nobody puts on the worksheet

    There's an eighth bucket your CFO will surface if you're working the problem honestly: the cost of your time as CEO.

    When IT goes sideways at a growth-stage company, it eats CEO time. The phishing incident that requires a board update. The cyber insurance renewal where you have to fill out the questionnaire yourself because nobody else knows the answers. The compliance review for an enterprise customer that asks for a SOC 2 attestation. The vendor call about the licensing audit. The 9 PM Slack from the head of sales because Outlook is down. Every one of those is a CEO-time tax.

    The companies running on Column C with a strong MSP partner don't have these. The MSP fills out the questionnaire. The MSP does the licensing reconciliation. The MSP handles the incident and reports up. The CEO finds out it happened, not because they had to drive it.

    If your CFO's worksheet is built honestly, this line is real money. A CEO at this company size is worth $250 to $500 an hour on the high side of what's defensible. Saving 5 hours a week is $1,250 to $2,500. Annualized, $65,000 to $130,000. The Column C MSP is cheaper than Column A before you even count the work it actually does, once you put a value on CEO time.

    When the in-house hire is the right move

    Three situations where I would hire instead of outsource.

    You're already past 100 employees and growing fast. At that scale the operational tempo justifies a real internal director, and an MSP backstop covers depth and coverage. Column B. Don't try to do this with just the hire.

    Your industry has unusual operational technology needs. Manufacturing with OT, healthcare with medical devices, life sciences with lab equipment. The technician work is too embedded in the operations to fully outsource. You want someone in the building who knows your equipment. Still pair with an MSP for everything that's commodity (M365, Azure, security baseline). Column B.

    You're already large enough to have an internal team and you're outsourcing the leadership of it. This is the rare reverse case where you have three or four internal technicians and you're trying to outsource the director role. It usually doesn't work. Either consolidate to a fully outsourced model or hire a real CTO and stop trying to lead the team through a third party.

    Outside those three, Column C is the answer at this company size.

    The questions to ask before you sign with any MSP

    This is the diligence checklist your CFO will want you to run if you take the Column C path.

    1. Who specifically would be assigned to our account? Names, not titles. Can we talk to them before signing?
    2. What's the average tenure of those people at your firm?
    3. Walk us through the seven coverage categories above. Where do you draw the lines on what's in scope and out of scope?
    4. Show me a real client incident report from the last 90 days. Redacted, but real.
    5. What's your customer concentration? If we're 30 percent of your revenue, that's a problem. If we're 0.3 percent, that's also a problem.
    6. What does month one look like? Month three? Month twelve? Specifically.
    7. What's the exit process? If we want to leave in 18 months, what happens to our data, our accounts, our documentation?
    8. Show me your own internal security posture. SOC 2? MFA on every admin account? If your MSP can't model what it sells, it can't sell it.

    A serious MSP answers all eight quickly and without spin. A weak one will hedge on three of them. That's how you know.

    The summary your CFO will give you

    For a 50-person growth-stage company in 2026:

    • Column A (one hire, no MSP): $135K to $215K a year, high risk, partial coverage. Don't.
    • Column B (hire plus MSP): $185K to $335K a year, moderate risk, full coverage. Right when you're past 100 employees or have unusual operational needs.
    • Column C (MSP only): $120K to $180K a year, low risk, full coverage. The right answer for most growth-stage companies at this size.

    The math says Column C wins on cost, on risk, and on CEO time recovery. The org-chart objection is solvable by demanding a named technical account manager from your MSP. The "burned before" objection is solvable by diligence.

    The shape of the company that wins at 200 employees was almost always shaped by the IT operating model it picked at 50.

    Want to run your own numbers? Use the Agility 365 ROI Calculator — plug in your team size and current IT spend and you'll get the in-house-hire-vs-managed-service comparison sized to your company in about two minutes.

    Or have your CFO ping us directly. We'll run the numbers for your specific company. No proposal until you ask for one.