Advancing Retail through E-Commerce, Cloud and Cyber security
John Gaspar Antonio, CIO/Vice President for Information Technology & E-Commerce / Data Protection Officer, Metro Retail Stores Group
John Gaspar Antonio, CIO/Vice President for Information Technology & E-Commerce / Data Protection Officer, Metro Retail Stores Group
John Gaspar Antonio oversees infrastructure, cybersecurity and support services at Metro Retail Stores Group and stands as the force behind the retailer’s digital roadmap, from boosting online sales to keeping systems secure and future-ready. Whether it’s rolling out new platforms, integrating AI and data analytics, or enhancing e-commerce strategies, he focuses on making Metro faster, smarter and more connected across every channel.
As CIO and Vice President for Information Technology & E-commerce, and also serving as Data Protection Officer at Metro Retail Stores Group, I lead the development and implementation of the IT roadmap aligned with our business goals. My responsibility encompasses a wide range of areas, including overseeing infrastructure and systems, driving cybersecurity and managing enterprise applications like ERP and modern retail systems. Additionally, I am responsible for scaling our digital commerce strategy. This involves managing platforms, optimizing customer experience, and enhancing omnichannel capabilities to expand online sales and reach. In my role as DPO, I ensure the company remains compliant with the Data Privacy Act and related regulations. That includes implementing data protection policies, conducting risk assessments and managing incident response related to personal data. On the operational side, I oversee dayto-day IT support services and project delivery, ensuring system reliability, security and service quality across all business units. With innovation being central, I champion the use of emerging technologies such as AI, automation and data analytics to keep Metro competitive and ready for the future. Collaboration is the key. I work closely with cross-functional leaders and external partners to align IT and e-commerce strategies with corporate goals while also mentoring and empowering my team.
Building New-Age Retail TechOne of the key challenges in retail IT is balancing the demands of e-commerce with legacy infrastructure in a brick-and-mortar environment. We approach this through layered modernization. Rather than replacing legacy systems all at once, we implement modern APIs, middleware and data lakes to create bridges between old and new, helping us to accelerate and keep store operations stable. Enhancing omni-channel capabilities is a priority. This involves synchronizing data, inventory and promotions across platforms, which would align with new POS systems like Xilnex, our e-commerce platforms, loyalty systems and a well-structured AI-backed data framework.
In terms of cybersecurity, I still believe in the strength of traditional firewalls as the first line of defense. They remain critical for guarding the perimeter in a distributed retail environment with complex networks and multiple locations. This is complemented by robust endpoint protection, which gives us visibility and control over all IT assets, whether on-site or remote. Every device is a potential entry point, so endpoint security is non-negotiable. To tie everything together, we rely on our managed security operations center (MSOC) for 24/7 threat monitoring and response. The MSOC provides real-time analytics, correlation of security events and immediate response capabilities that traditional tools alone can’t deliver. I view cybersecurity as a layered defense. Firewalls protect the gate, endpoints guard the assets and the MSOC ensures that the entire system is under continuous surveillance. It’s a practical, proven approach that sticks to the basics while adapting to modern threats.
Managing change effectively requires more than just issuing memos or holding briefings. It involves a thoughtful, iterative process that engages staff at every level
We’ve learned a few key lessons while managing WiFi and our Snowflake data lake. We’ve found that cloud delivers the most impact in simplifying operations such as centralized network management, real-time inventory visibility, or unifying customer data. In the retail industry, cloud technology is not a simple solution. Carefully integrating old and new systems to avoid daily store operations is necessary. Security and governance must evolve as well. Even in the cloud, we maintain tight control through firewalls, endpoint monitoring, and oversight from our MSOC to ensure data protection and compliance. Security and governance must evolve as well. Even in the cloud, we remain hands-on with firewalls, endpoint monitoring and oversight from our MSOC to ensure data protection and regulatory compliance. Most importantly, successful cloud adoption depends on people as much as technology. Training teams, adjusting workflows and aligning IT with business users are critical. In short, cloud helps us move faster, manage smarter and stay secure, but only when it's rolled out with the right mix of planning, integration and enablement.
For retail CIOs who are early in their digital transformation, I always recommend starting with the business need. Focus on solving real operational problems, whether that’s inventory visibility, faster checkout, or better customer engagement. These quick wins create momentum and help build credibility. Invest early in secure networks, centralized data platforms, and reliable connectivity, which form the foundation for future innovations like AI, personalization and automation. It’s important to take a phased, modular approach. You don’t have to do everything at once. Cloud and APIs can help integrate systems gradually, keeping operations smooth along the way. Cybersecurity should be embedded from day one. In retail, customer data protection is critical to maintaining trust and continuity. Equally important is building alignment across departments. Digital transformation isn’t just the job of IT. Buy-in operations, marketing, and store teams all co-create solutions and make adoption of tools and solutions impactful. And finally, track the right outcomes. Track success in terms of business impact, not just system uptime. Highlight wins—big or small—to sustain support and funding and drive long-term change.
