Nonprofit CFO vs Controller vs Outsourced Accounting: Which Does Your Organization Actually Need?

One caution that most people reading these returns miss. Line 5 is compensation only. It excludes pension contributions, other employee benefits and payroll taxes, which sit on lines 8, 9 and 10. So comparing line 5 directly against line 11c understates the real cost of employing someone, sometimes badly. Add a pro-rata share of lines 8 through 10 before drawing a conclusion.

There is a second payoff. If you do employ your finance lead, the board needs a documented process for setting their pay. Treasury regulations give a rebuttable presumption of reasonableness where the arrangement is approved in advance by an authorized body, based on appropriate comparability data, and documented concurrently. For organizations with annual gross receipts under $1 million, the comparability requirement is met with data on three comparable organizations in similar communities. Three peer Form 990s. Most small boards believe they need to buy a salary survey. They do not.

On actual numbers, here is the one figure we are prepared to publish and the four reasons to treat it carefully. The Candid Nonprofit Compensation Report draws on Forms 990 and 990-EZ rather than a voluntary survey, which removes the response bias that ruins most salary data. In its 2026 edition, covering fiscal year 2024, the median for the top finance position was $33,175 at organizations with budgets of $250,000 or less and $50,000 between $250,000 and $500,000.

The caveats matter as much as the figures. There is no CFO category; the row is labeled top finance position and conflates CFO, controller, director of finance and employed treasurer. The data runs roughly two years behind. It captures only people above the Part VII reporting thresholds, which systematically excludes the smallest organizations' real arrangements. And reportable compensation is not salary.

Which supports exactly one conclusion, and it is a useful one: at the smallest organizations the top finance role is paid like a part-time bookkeeper, because that is what it usually is. The gap between that and a controller's market rate is the gap most organizations are actually trying to bridge.

When You Are Too Small to Separate Duties

Segregation of duties is where small organizations assume the rules do not apply to them. They do, and the standard anticipates the problem.

The Standards for Internal Control in the Federal Government, one of the two frameworks 2 CFR 200.303(a) says a federal award recipient's internal controls should align with (the other is the COSO Internal Control-Integrated Framework), provides under Principle 10 that management should segregate incompatible duties, and that where segregation of duties is not practical because of limited personnel or other factors, management designs alternative control activities to address the risk. GAO revised these standards in May 2025, effective from fiscal year 2026, so check the current edition before citing a paragraph number.

So the answer to "we only have two people" is compensating controls, not surrender. The four duties to separate are authorizing a transaction, executing it, recording it, and having custody of the related asset. Where you cannot separate them, the usual compensating controls, which are professional practice rather than rule, are:

• The executive director or a board member reviews unopened bank statements.
• Dual approval above a dollar threshold.
• Someone outside accounting reviews the full check register and payee list.
• Independent review of the bank reconciliation.
• Mandatory vacation or periodic rotation of duties.

This is also a genuine argument for outsourcing: an outside provider gives you separation between recording and custody that a two-person office cannot create internally.

Bottom Line: Four Questions, In Order

1. Are transactions recorded accurately and on time? If not, you need bookkeeping capacity, not a CFO.
2. Is there a compliance obligation with an external deadline and an external examiner? If yes, you need controller capability, whether employed or bought in.
3. Is there a decision with a wrong answer that would be expensive? If yes, you need CFO capability, and fractional is usually the way to start.
4. Is there someone inside the organization with enough skill, knowledge and experience to oversee an outside provider and accept responsibility for the work? If not, outsourcing at the level you want is not available to you yet, and fixing that is the first job.

Question four is the one nobody asks, and it is the only one with a rule behind it.

Orbit Accountants provides nonprofit bookkeeping and fractional CFO support as separate layers rather than a single package, precisely so that organizations can buy the capability they are missing instead of the one they can afford. If you are not sure which that is, the four questions above are the conversation we would have anyway.

Also read: Fractional CFO for Nonprofits: What They Do and When to Hire One

Frequently Asked Questions

What is the difference between a nonprofit controller and a CFO?

No professional body defines either title, so the distinction is convention rather than standard. The federal occupational classification is the nearest authoritative source, and it places a controller among Financial Managers, directing financial activities such as planning, procurement and investments, while listing CFO among Chief Executives alongside the CEO and executive director, those who formulate policy and provide direction within guidelines set by a governing body. In practice a controller owns the close, the ledger, grant tracking and audit preparation, while a CFO owns the decisions that have no obviously right answer and is accountable to the board for them.

When does a nonprofit need a CFO rather than a controller?

When decisions rather than reports have become the bottleneck. Typical triggers are a first conditional multi-year grant that needs a recognition judgment, debt with covenants to forecast, a capital campaign, an endowment, a second legal entity or fiscal sponsorship, or a reserves and pricing question the board cannot resolve. If the work is producing accurate information, that is a controller. If the work is deciding what to do with it and defending that to a board or a funder, that is a CFO.

Can a nonprofit outsource its entire finance function?

Not entirely. Before accepting an audit engagement, an auditor has to obtain management's agreement that management is responsible for the financial statements, for the internal control necessary to prepare them, and for providing access to records and people, and that responsibility sits inside the organization. Where the auditor also does the accounting work, independence standards go further: the organization must designate an individual with suitable skill, knowledge or experience to oversee that work, and the auditor cannot set policy or strategic direction, hold custody of assets, report to the board on behalf of management, decide which of its own recommendations to implement, or accept responsibility for internal control. The practical question is therefore what the smallest internal role is that makes outsourcing work.

Does hiring a fractional CFO as a contractor create a payroll tax problem?

It can, and the risk comes from a rule many people are unaware of. Normally classification turns on the common law control test. But 26 CFR 31.3121(d)-1(b) provides that an officer of a corporation is an employee of the corporation, and the IRS applies that to exempt organizations for FICA, FUTA and withholding purposes. The exception covers only an officer who performs no or minor services and receives no remuneration, which describes an unpaid board treasurer rather than a paid fractional CFO. A services contract that confers no officer title, with a separate unpaid board treasurer, is usually the cleaner structure.

When does a nonprofit need a single audit?

When it expends $1,000,000 or more in federal awards during its fiscal year, under 2 CFR 200.501(a), raised from $750,000 effective October 1, 2024. The test is on what was expended rather than received or awarded, money received as a contractor for goods or services does not count while subawards passed through a state agency usually do, and an organization expending under a single federal program may be able to elect a cheaper program-specific audit instead.

How much does a nonprofit CFO cost?

The published data in this sector is weak and we would rather give you a technique than a number. The strongest source, Candid's compensation report, draws on Forms 990 rather than a voluntary survey, but has no CFO category, runs about two years behind and excludes anyone below Form 990 reporting thresholds. Its figures for fiscal year 2024 put the median top finance position at $33,175 for organizations with budgets of $250,000 or less and $50,000 between $250,000 and $500,000, which mostly tells you that at the smallest organizations the role is paid like a part-time bookkeeper. For a real benchmark, read Part VII and Part IX of three or four peer organizations' Forms 990 directly.

How can I tell whether a peer nonprofit outsources its accounting?

Read their Form 990. Part VII lists officers, and the IRS instructs filers to treat the top financial official as an officer whatever their title, so whoever runs finance appears there if they are an employee. Part IX line 5 shows compensation of officers and key employees while line 11c shows fees for accounting services paid to non-employees. Material line 11c with no finance person in Part VII indicates an outsourced function; both being material indicates a hybrid. Note that line 5 excludes benefits and payroll taxes, which sit on lines 8 to 10, so comparing it directly against line 11c understates the cost of employing.

What if we are too small to segregate duties?

The internal control standards anticipate this. The Standards for Internal Control in the Federal Government, one of the two frameworks the Uniform Guidance points federal award recipients to, provide that where segregation of duties is not practical because of limited personnel, management designs alternative control activities to address the risk. In practice that means compensating controls: review of unopened bank statements by someone outside accounting, dual approval above a threshold, independent review of the bank reconciliation and the check register, and rotation of duties. An outside provider can also supply separation between recording and custody that a two-person office cannot create internally.

Can Orbit Accountants help us work out which role we need?

Yes, and it is usually a short conversation. We provide nonprofit bookkeeping and fractional CFO support as separate layers rather than one package, so the starting point is identifying which capability is actually missing rather than selling a bundle. Where the answer is that you need an internal person to oversee the work, we will say so.