Joe Barfield

About Joe Barfield

CIO | CISO | Enterprise Technology & Security Executive Forward-thinking executive with deep expertise in developing and implementing comprehensive Information Security Programs and overseeing enterprise Cybersecurity, Governance, Risk, and Compliance (GRC). A strategic partner to the C-suite and Board, known for driving security modernization and strengthening cyber resilience. Forward-thinking executive with deep experience in developing and implementing comprehensive Information Security Programs, establishing enterprise-wide Cyber Risk Quantification (CRQ), and overseeing Business Continuity and Disaster Recovery (BCDR) for global organizations. Proven success in maturing competencies (NIST 2.0, ISO 27001), establishing enterprise-wide accountability, and managing security operations. Expert in risk mitigation, large-scale Incident Response planning, and the design and execution of tested Business Continuity (BCP) and IT Disaster Recovery Programs. Highly skilled in Third-Party Risk Management (TPRM), vendor negotiation, and ensuring regulatory compliance, including PCI Compliance and Data Privacy controls. A dynamic and influential leader who blends visionary strategy with operational discipline—strengthening cyber resilience, maturing IT governance, and fostering high-performing teams that deliver measurable business value. Adept at shaping enterprise-wide technology roadmaps, enhancing stakeholder trust, and championing the adoption of emerging technologies to unlock growth, efficiency, and competitive advantage. As a CIO/CISO, I serve as a catalyst for transformation, ensuring that technology, security, and business strategy

Experience

1. CIO CISO

   Heritage Communities

   Mar 2025 — Present · NE, US

   I am a transformation-focused CIO/CISO with experience leading enterprise-scale technology and cybersecurity modernization across a multinational $500M senior-living organization. I bridge business strategy, IT execution, and cyber risk management—positioning technology and security as integrated enablers of operational excellence, regulatory compliance, and scalable growth.I specialize in repositioning IT and cybersecurity from support functions into trusted, customer-centric strategic partners. My work has included modernizing infrastructure and applications, establishing enterprise governance, strengthening cybersecurity posture, and building sustainable operating models supporting Independent Living, Assisted Living, and Memory Care environments.I have led multi-year modernization roadmaps across cloud adoption, ERP transformation, enterprise application standardization, and managed services—improving reliability, visibility, and cost efficiency. As executive sponsor, I guided enterprise technology strategy and delivered a $1M ERP and Nurse Call solution to 1,600+ employees, enhancing clinical responsiveness, operational reporting, and workforce communication.On the security front, I designed and executed cybersecurity programs aligned to the NIST 2.0 framework, directing incident response, breach investigations, penetration testing, and vulnerability management. I established PCI DSS, HIPAA, and GDPR compliance frameworks in partnership with Legal Affairs, auditors, and regulators—strengthening data privacy and organizational resilience.I am committed to people and culture, building IT and cybersecurity career pathways and talent pipelines across SOC operations, cloud engineering, governance, AI, and PMO disciplines. I bring a balanced executive perspective aligning technology innovation, cyber risk, and business outcomes—helping organizations modernize securely and scale responsibly.

Education

• Strayer University

  Master of Business Administration - MBA, Business Administration and Management, General

• Metropolitan Community College

  AAS, Computer Programming Technology

  1993 — 1997

• Creighton University

  MBA/ISTM, Organizational behavior/IT Management

  2006

• University of Nebraska at Omaha

  BSBA, Marketing, MIS

  1995 — 1999

• Jack Welch Management Institute

  Master of Business Administration (MBA), MBA

  2016

Skills

• Security
• Enterprise Software
• Enterprise Architecture
• Sla
• Budgets
• Customer Relations
• Sdlc
• Disaster Recovery
• Business Analysis
• Virtualization
• Data Center
• Solution Design
• Process Improvement
• Agile Methodologies
• Management
• IT Strategy
• IT Service Management
• Telecommunications
• Change Management
• Business Enabler
• Project Management
• Software Development
• Strategy
• Network Architecture
• Team Leadership
• Erp
• Project Planning
• Information Technology
• Requirements Analysis
• Vendor Relations
• Pmp
• Six Sigma
• Business Continuity
• Business Communications
• Project Portfolio Management
• Income Statement
• Strategic Planning
• Risk Management
• P&L
• IT Operations