He was put there because he was with the company for years before and he led other departments fine.
Since he can't evaluate anything IT related himself he relies on 'advice' from the people beneath him who try to get the most budget for their departments by overstating how important they are.
This layer beneath him is mostly product managers, RTEs etc... (We are SAFE Agile! Developer Velocity, Woohoo!).
They also don't know much about computer and if they do it's very domain specific, such as SAP or so.
These people try to fight for budget by overstating their importance. They demonstrate this by having more apps and more people relying on them.
"Look we handled 2000 support tickets, the company would grind to a halt without us!".
Never mind that having 2000 support tickets is a bad thing. And also mostly caused by their shitty apps.
This keeps going on and on. I have 10 years experience as engineer and wanted to see "the other side" but it's so exhausting.
A few months back a 'privacy officer' asked why the first and last names of our employees were in the Active Directory and ordered them to reduce the privacy risks.
They failed to specify what risks. Couldn't articulate them even when asked. They also didn't say when the risk would've been reduced 'enough'.
The team was panicking as they were now 'non-compliant' with company policy.
I had to intervene personally to make sure this single directive didn't derail our entire company.