How do you find CIO and IT director contacts?

What does a CIO own

A CIO owns the technology an organisation runs on: infrastructure, business applications, the service desk, the IT budget and often information security. Where a CTO builds the product a company sells, the CIO keeps its internal systems working, so they care about reliability, cost, risk and how a new system fits the existing estate.

In regulated sectors such as banking, insurance, healthcare and the public sector, CIOs also answer to regulators and auditors for the technology they approve. That makes them careful buyers who prefer suppliers with a track record and clear documentation over the newest option.

Which titles cover IT director and head of IT contacts

Search the CIO title alongside the IT leadership titles mid-sized organisations use, and include the people who evaluate for them.

Set seniority to C-suite and director for the sponsor, and manager or senior specialist for the evaluator. A headcount filter helps too: below a few hundred staff, the senior IT person is more often an IT manager than a CIO, and that buyer behaves differently.

• Large and regulated organisations: chief information officer, chief digital officer, group IT director.
• Mid-sized companies: IT director, head of IT, head of technology.
• Evaluators: enterprise architect, head of infrastructure, head of applications, IT service manager.
• Public sector: director of digital, head of ICT, chief digital and information officer.

How do you reach the person who will run the evaluation

Reach the evaluator by asking the CIO, or the CIO's office, who owns the problem you solve, then writing to that person with the referral in your first line. A CIO approves many purchases they never test: the enterprise architect checks fit with the estate, the infrastructure or applications lead checks operation and support, and the security team checks risk. A referral from the CIO's office carries weight with all of them.

Triggers tell you when to ask. A new CIO or IT director, a cloud migration, a major system replacement mentioned in job adverts or an annual report, a merger, or an incumbent supplier's contract coming up for renewal all open a decision.

How to reach a CIO through procurement and security review

Reach a CIO's organisation ready for procurement, because the purchase will pass through security, legal and vendor risk checks before anyone signs. Public sector buyers often purchase through frameworks, such as G-Cloud in the UK, so being on the right framework can matter more than any outreach.

• A completed security questionnaire, or a trust page that answers the common questions.
• Your certifications, such as ISO 27001 or SOC 2 Type II, or their target dates where they are pending.
• A data processing agreement and a list of sub-processors.
• Penetration test summaries, business continuity and incident response arrangements.
• Insurance certificates and financial information for supplier onboarding.

What GDPR means for contacting IT leaders

You can usually contact an IT leader at a work address under legitimate interest, and you should expect them to test how you handle their data. IT leaders often run data protection controls themselves, so collect the minimum, note the source of each contact and set a retention period you can explain.

Respond quickly to an objection or a request to delete, and keep your legitimate interest assessment where you can find it. In the UK, PECR covers the email itself. This is general information rather than legal advice.