{ "source": "Cooked Index — occupational AI risk register", "page": "https://cookedindex.com/jobs/computer-and-information-systems-managers/", "methodology": "https://cookedindex.com/methodology", "notice": "Verdicts are re-examined as evidence accumulates. Re-fetch before relying on this; the page above always carries the current score.", "scored_at": "2026-08-11", "model": "claude-opus-5", "occupation": { "title": "Computer and Information Systems Managers", "soc_code": "11-3021", "category": "Management", "us_employment": 670570, "median_annual_wage": 175140 }, "verdict": "EXPOSED", "risk_resistance": 44, "contested": false, "near_boundary": false, "dimensions": { "task_resistance": 11, "embodiment": 3, "liability_shield": 4, "trust_premium": 10, "judgment_accountability": 16 }, "reasoning": { "task_resistance": "Roadmap prioritization, vendor negotiation, and headcount decisions still need a human in the room, but the surrounding load — SLA reporting, change-advisory-board documentation, on-call rotation planning, sprint summaries, RFP response scoring — is enough of the calendar to hold this at 11 rather than the mid-teens.", "embodiment": "The 3 reflects the rare walk to a data center or wiring closet during an outage; racking, cabling, and hardware swaps belong to the infrastructure staff, and this job is Slack, Jira dashboards, and executive meetings.", "liability_shield": "No state license gates the title — a CISSP or PMP is a hiring signal, not a legal barrier — and when SOX or HIPAA controls fail, the signature on the attestation is the CFO's or CISO's, leaving the 4 to reflect only that large enterprises still prefer credentialed candidates.", "trust_premium": "Executives and business-unit heads rely on knowing whose estimates hold and who tells them bad news early, which is worth a 10, but the relationship is renegotiated with every reorg and does not travel the way a client book does.", "judgment_accountability": "Accepting a documented security risk, killing a mid-flight ERP migration, deciding whether an incident is disclosable, and firing an underperformer are calls made with incomplete data where the manager's name is on the decision record — the 16 stops short of higher only because board-level capital allocation sits above them." }, "rationale": "The reporting layer of this job — status decks, budget variance write-ups, vendor comparison matrices, incident postmortems, capacity forecasts, ticket-trend analysis — is already drafted well by AI, and that is a real share of an IT manager's week. What persists is owning consequential calls under ambiguity: which platform bet to make, whether to accept a security risk, who to hire and fire, and standing in front of executives when a migration or breach goes badly. No license protects the role, and as AI compresses the engineering teams below them, the layer of managers needed to coordinate those teams thins too.", "outlook": "The role survives but consolidates — fewer managers each owning wider scope, with those who own risk, budget, and vendor leverage keeping their seats while pure coordination layers get squeezed out.", "what_would_raise_it": { "levers": [ { "dimension": "liability_shield", "change": "SEC cyber disclosure rules (Item 1.05, effective Dec 2023) already force a named accountable officer for materiality determinations; if state or federal rules push personal attestation down from CISO/CFO to named systems managers — as NYDFS Part 500 amendments (Nov 2023) do by requiring a senior officer certification of compliance with documented sign-off from responsible IT leadership — the role acquires a genuine signature requirement", "plausibility": "already happening", "would_add": 4 }, { "dimension": "liability_shield", "change": "EU AI Act obligations for high-risk system deployers (human oversight, logging, post-market monitoring) becoming contract-flowed requirements naming an internal accountable deployment owner, plus cyber-insurance underwriters requiring a named IT manager attestation on change-control and MFA posture as a condition of payout", "plausibility": "plausible", "would_add": 3 }, { "dimension": "task_resistance", "change": "Genuine two-tier job: if the deck-and-variance-report tier is fully automated, the residual week is vendor negotiation, risk acceptance, headcount decisions, and incident command under executive pressure — none of which current models can perform because they require authority, not analysis. Watch for the manager-to-IC ratio and whether reporting duties disappear from job postings", "plausibility": "already happening", "would_add": 3 }, { "dimension": "judgment_accountability", "change": "Already near ceiling; would rise only if AI-agent governance (approving autonomous agents with production write access, owning their blast radius) becomes a formal named-owner duty under an internal control framework such as an updated COBIT/SOX ITGC scope", "plausibility": "plausible", "would_add": 2 } ], "ceiling_note": "The structural risk is quantity, not per-role defensibility: judgment_accountability is already 16 and cannot carry the score if the number of manager slots halves as engineering teams compress. No plausible route to a higher trust_premium — buyers of internal IT management are executives who do not pay a premium for a human coordinator, only for someone who can be held responsible." }, "adjudication": null, "employment_history": { "points": [ { "y": 2017, "emp": 365690, "wage": 139220 }, { "y": 2018, "emp": 391430, "wage": 142530 }, { "y": 2019, "emp": 433960, "wage": 146360 }, { "y": 2020, "emp": 457290, "wage": 151150 }, { "y": 2021, "emp": 485190, "wage": 159010 }, { "y": 2022, "emp": 533220, "wage": 164070 }, { "y": 2023, "emp": 592600, "wage": 169510 }, { "y": 2024, "emp": 645970, "wage": 171200 }, { "y": 2025, "emp": 670570, "wage": 175140 } ], "from": 2017, "to": 2025, "change_pct": 83.4, "comparable_from": 2019, "spans_soc_revision": true }, "pivots": [], "license": "https://cookedindex.com/terms" }