enterprisesecuritymagapac

A featured contribution from Leadership Perspectives, a curated forum for enterprise security leaders, nominated by our subscribers and vetted by the Enterprise Security Magazine Editorial Board.

Metro Retail Stores Group [PSE: MRSGI]

Advancing Retail through E-Commerce, Cloud and Cybersecurity

John Gaspar Antonio

Omnichannel Systems Modernizer

John Gaspar Antonio oversees infrastructure, cybersecurity and support services at Metro Retail Stores Group and stands as the force behind the retailer’s digital roadmap, from boosting online sales to keeping systems secure and future-ready. Whether it’s rolling out new platforms, integrating AI and data analytics, or enhancing e-commerce strategies, he focuses on making Metro faster, smarter and more connected across every channel.

As CIO and Vice President for Information Technology & E-commerce, and also serving as Data Protection Officer at Metro Retail Stores Group, I lead the development and implementation of the IT roadmap aligned with our business goals. My responsibility encompasses a wide range of areas, including overseeing infrastructure and systems, driving cybersecurity and managing enterprise applications like ERP and modern retail systems. Additionally, I am responsible for scaling our digital commerce strategy. This involves managing platforms, optimizing customer experience, and enhancing omni-channel capabilities to expand online sales and reach. In my role as DPO, I ensure the company remains compliant with the Data Privacy Act and related regulations. That includes implementing data protection policies, conducting risk assessments and managing incident response related to personal data. On the operational side, I oversee day-to-day IT support services and project delivery, ensuring system reliability, security and service quality across all business units. With innovation being central, I champion the use of emerging technologies such as AI, automation and data analytics to keep Metro competitive and ready for the future. Collaboration is the key. I work closely with cross functional leaders and external partners to align IT and e-commerce strategies with corporate goals while also mentoring and empowering my team.

Building New-Age Retail Tech

One of the key challenges in retail IT is balancing the demands of e-commerce with legacy infrastructure in a brick-and-mortar environment. We approach this through layered modernization. Rather than replacing legacy systems all at once, we implement modern APIs, middleware and data lakes to create bridges between old and new, helping us to accelerate and keep store operations stable. Enhancing omni-channel capabilities is a priority. This involves synchronizing data, inventory and promotions across platforms, which would align with new POS systems like Xilnex, our e-commerce platforms, loyalty systems and a well-structured AI-backed data framework. To support performance while balancing costs, we’re transitioning from cloud to hyper-converged infrastructure (HCI) technologies. This gives us the benefits of the cloud in a more controlled and efficient environment.

“Cloud helps us move faster, manage smarter, and stay secure, but only when it's rolled out with the right mix of planning, integration, and enablement”

In terms of cybersecurity, I still believe in the strength of traditional firewalls as the first line of defense. They remain critical for guarding the perimeter in a distributed retail environment with complex networks and multiple locations. This is complemented by robust endpoint protection, which gives us visibility and control over all IT assets, whether on-site or remote. Every device is a potential entry point, so endpoint security is nonnegotiable. To tie everything together, we rely on our managed security operations center (MSOC) for 24/7 threat monitoring and response. The MSOC provides real-time analytics, correlation of security events and immediate response capabilities that traditional tools alone can’t deliver. I view cybersecurity as a layered defense. Firewalls protect the gate, endpoints guard the assets and the MSOC ensures that the entire system is under continuous surveillance. It’s a practical, proven approach that sticks to the basics while adapting to modern threats.

Layered Defense Adoption

We’ve learned a few key lessons while managing Wi-Fi and our Snowflake data lake. We’ve found that cloud delivers the most impact in simplifying operations such as centralized network management, real-time inventory visibility, or unifying customer data. In the retail industry, cloud technology is not a simple solution. Carefully integrating old and new systems to avoid daily store operations is necessary. Security and governance must evolve as well. Even in the cloud, we maintain tight control through firewalls, endpoint monitoring, and oversight from our MSOC to ensure data protection and compliance. Security and governance must evolve as well. Even in the cloud, we remain hands-on with firewalls, endpoint monitoring and oversight from our MSOC to ensure data protection and regulatory compliance. Most importantly, successful cloud adoption depends on people as much as technology. Training teams, adjusting workflows and aligning IT with business users are critical. In short, cloud helps us move faster, manage smarter and stay secure, but only when it's rolled out with the right mix of planning, integration and enablement.

For retail CIOs who are early in their digital transformation, I always recommend starting with the business need. Focus on solving real operational problems, whether that’s inventory visibility, faster checkout, or better customer engagement. These quick wins create momentum and help build credibility. Invest early in secure networks, centralized data platforms, and reliable connectivity, which form the foundation for future innovations like AI, personalization and automation. It’s important to take a phased, modular approach. You don’t have to do everything at once. Cloud and APIs can help integrate systems gradually, keeping operations smooth along the way. Cybersecurity should be embedded from day one. In retail, customer data protection is critical to maintaining trust and continuity. Equally important is building alignment across departments. Digital transformation isn’t just the job of IT. Buy-in operations, marketing, and store teams all co-create solutions and make adoption of tools and solutions impactful. And finally, track the right outcomes. Track success in terms of business impact, not just system uptime. Highlight wins—big or small—to sustain support and funding and drive long-term change.

The articles from these contributors are based on their personal expertise and viewpoints, and do not necessarily reflect the opinions of their employers or affiliated organizations.