Financial Services IT Budget Benchmarks
Financial services spends 7 to 10 percent of revenue on IT, the highest of any major industry. Per-employee spend runs $14,000 to $25,000. Below: the full breakdown by sub-sector, regulatory drivers, the typical allocation, and disclosed-IT ratios from large-cap 10-K filings.
% of Revenue
7 - 10%
Highest of any major industry
Per Employee
$14k - $25k
Universal banks at the top of the range
Security Share
18 - 22%
Of IT, versus 12-15 percent for most industries
Why Financial Services Spends More
Financial services has consistently been the highest IT-spending major industry. Five forces explain the gap from the all-industry average of 5.7 percent of revenue:
- The product is digital. Modern banking, asset management, payments, and insurance are run on software. There is no physical product. Every transaction is a software event.
- Regulation is heavy. PCI-DSS, Basel III, Dodd-Frank, BSA/AML, GDPR, DORA (effective January 2025 in the EU). Each regulation drives specific tooling, audit and reporting costs.
- Outage cost is extreme. A one-hour core banking outage can cost a mid-size bank millions in fees, customer compensation and regulatory action. Resilience investment runs above peer industries.
- Fraud arms race. Real-time fraud detection AI has become table stakes. The 2024-2026 wave of authorised push payment fraud and AI-enabled social engineering has driven incremental fraud platform spend.
- Customer expectations. Customers expect mobile-first banking on par with consumer apps. Banks that under-invest in digital lose to neobanks and fintechs.
IT Spend by Financial Services Sub-Sector
| Sub-sector | % of Revenue | Per Employee | Notes |
|---|---|---|---|
| Universal banks | 9 - 11% | $18k - $55k | JPMorgan, Bank of America, Citi, HSBC. Largest technology workforces. |
| Regional and community banks | 6 - 8% | $12k - $20k | Core banking outsourced to FIS, Fiserv or Jack Henry. Lower in-house tech. |
| Asset and wealth management | 4 - 6% | $15k - $30k | High per-employee because of low headcount. Trading platforms, risk systems. |
| Insurance carriers | 3 - 5% | $10k - $18k | Policy admin, claims, distribution platforms. Modernisation projects. |
| Insurance brokers | 2 - 4% | $8k - $15k | Lower IT intensity than carriers. Agency management systems. |
| Payments and processors | 12 - 18% | $25k - $50k | Stripe, Adyen, PayPal, Block. Technology is the product. |
| Fintech start-ups | 12 - 20% | $20k - $35k | Higher % because revenue is small. Almost all spend is engineering and infrastructure. |
| Exchanges and market infra | 15 - 25% | $40k - $80k | CME, NYSE, LSE. Latency and resilience drive enormous IT intensity. |
Sub-sector ranges triangulated from Gartner Financial Services research, public 10-K filings via SEC EDGAR, and FDIC Statistics on Depository Institutions.
Disclosed IT Spend from Public Filings
A useful sanity check is to compare benchmark ranges against the actual disclosed technology spend from the largest publicly traded financial institutions. The figures below come from 10-K filings and investor day materials.
| Company | IT % of Revenue | Absolute Annual Spend | Source |
|---|---|---|---|
JPMorgan Chase Largest enterprise technology spend in financial services. ~63,000 technology employees disclosed. | ~11% of revenue | ~$17B annually | Disclosed in JPMorgan annual investor day materials and 10-K filings |
Bank of America Significant cloud migration and AI investment programmes. | ~9% of revenue | ~$13B annually | 10-K and investor day disclosures |
Citigroup Multi-year technology modernisation programme. | ~10% of revenue | ~$10B annually | 10-K filings and CFO commentary |
HSBC Notable share is regulatory and compliance technology. | ~8% of revenue | ~$5.5B annually | Annual report and pillar 3 disclosures |
Capital One One of the earliest large banks to migrate to all-cloud (AWS). Higher than peer due to digital-first model. | ~14% of revenue | ~$5B annually | 10-K filings |
Figures are approximate, derived from publicly available investor day disclosures and 10-K filings. Reporting definitions vary by company (some include all technology and operations, others narrower technology only). Use as directional reference, not exact comparison.
Five-Category Allocation in Financial Services
| Category | % of IT Budget | What It Covers |
|---|---|---|
| Personnel | 30-34% | Large engineering and security workforces. Technology is roughly 15-20 percent of total headcount at large banks. |
| Software and SaaS | 22-26% | Core banking, trading platforms, fraud detection, CRM, compliance. Specialist vendors dominate (Temenos, FIS, Fiserv, nCino, Murex). |
| Infrastructure and cloud | 16-20% | Hybrid cloud, on-prem core banking and HFT residue. Modernisation programmes ongoing. |
| Security and compliance | 18-22% | Highest share of any industry. PCI-DSS, SOX, DORA, BSA/AML, fraud platforms, cyber insurance. |
| Other | 6-8% | Help desk, training, hardware refresh, regulatory contingency. |
Regulatory Tech Line Items
Roughly half of the security and compliance category in financial services is regulatory technology rather than general security. The specific line items vary by sub-sector and geography. Below are the dominant ones in 2026.
PCI-DSS programme
Applies to: Anyone storing or processing card data
Annual QSA audit, tokenisation infrastructure, segmentation, continuous monitoring. Cost scales with transaction volume.
BSA/AML transaction monitoring
Applies to: US banks, money services businesses
Automated transaction monitoring, suspicious activity reporting, KYC and CDD platforms. Actimize, NICE, Quantexa lead this category.
DORA compliance (EU)
Applies to: All EU financial entities since January 2025
ICT risk management, incident reporting, digital operational resilience testing. Multi-year programme cost.
Basel III / SOX reporting
Applies to: Public US banks, internationally active banks
Risk reporting platforms, audit infrastructure, regulatory capital calculations. SAS, Moody's Analytics dominate.
Fraud detection AI
Applies to: All payment-handling firms
Real-time transaction screening, behavioural biometrics, device fingerprinting. Featurespace, Feedzai, ThreatMetrix prominent.
MiFID II reporting (EU)
Applies to: EU investment firms and trading venues
Transaction reporting, best execution monitoring, research unbundling. Specialist regtech vendors.
Related Pages
Healthcare IT Budget
6-9 percent of revenue, EHR and HIPAA-driven.
SaaS Company IT Budget
8-15 percent of revenue and why it runs higher.
All Industries
Side-by-side comparison of all major sectors.
Cybersecurity Budget
Why financial services runs at 18-22 percent of IT.
IT Spend Per Employee
Where financial services sits on the per-FTE curve.
IT as % of Revenue
The percentage-of-revenue framing across sectors.
Calculate your financial services IT budget
Enter revenue, sub-sector and regulatory scope to get a tailored budget with category breakdown.
Use the IT Budget Calculator