Phuc Tran My (Jack)
Head of IT, Risk, Security & Data Protection — SGH Asia (2021–Present)
Senior technology leader with 15+ years building and running IT, cybersecurity, and governance programs across multinational operations in Germany, Singapore, and Vietnam. Open to senior leadership roles in IT, cybersecurity, and IT governance.
Built an ISO 27001:2022 ISMS entirely in-house. IT controls audited by KPMG across 120+ branches at CJ CGV Vietnam.
Head of IT, Risk, Security & Data Protection, SGH Asia.
Senior technology leader building and owning end-to-end IT, cybersecurity, and governance programs — most recently Head of IT, Risk, Security & Data Protection at SGH Asia (200 employees, Germany / Singapore / Vietnam); previously Head of IT Data Center & Security at Hung Thinh Group (4,000 employees) and Head of IT Infrastructure & Security at CJ CGV Vietnam (2,000 employees, 120+ branches).
Member of the Board of Management (BOM), reporting to the CEO on technology strategy, risk, and compliance. Built an ISO 27001:2022 Information Security Management System entirely in-house — policy, risk assessment, control implementation, and audit liaison — including a full standard-version transition from 2013 to 2022.
Cross-border regulatory delivery spanning GDPR for a German client (name withheld), PDPL/DPO services for a Dutch software company (name withheld), and qualified Vietnam Data Protection Officer (VnDPO) under PDPL 2026. Combines hands-on infrastructure and security engineering with governance discipline and project delivery rigor.
Outcomes delivered across SGH Asia, Hung Thinh Group, and CJ CGV Vietnam.
Five layers, one program.
ISO 27001:2022 ISMS built entirely in-house, including the 2013 → 2022 transition; IT controls audited by KPMG across 120+ branches; COBIT-based governance across 120+ branches.
Segmentation across 120+ branch locations and a Tier-3 data center; firewall centralization, intrusion prevention, and secure VPN for multi-country operations.
IAM/SSO/MFA and access governance across Germany, Singapore, and Vietnam; RBAC for 2,000+ employees; Zero Trust-aligned access controls.
Classification, encryption, and privacy-by-design; GDPR delivery for a German client (name withheld), PDPL/DPO services for a Dutch software company (name withheld), qualified Vietnam DPO.
B2C platform at 200+ transactions/second under PCI-DSS-adjacent controls; 24/7 SIEM (Splunk) monitoring; multi-cloud operations at 99.99% uptime.
Major programmes delivered as project manager and implementer.
Replaced fragmented small software with one centralized ERP consolidating accounting, HR, ticketing, distribution, purchasing, sales, marketing, and legal. Go-live on June 1, 2017 across nearly 60 branches and head offices within 8 hours, on Oracle RAC / DataGuard.
Go-live across ~60 branches and head offices within 8 hours
Two-phase build: customer familiarization, then full contact center with CRM, ERP, and social-media integration (Facebook, Zalo), AI BOT plus Knowledge Base, and unified reporting for the customer-service team.
VMware virtualization with NetApp / Dell / HP storage across data center and DR site; application clustering for committed SLAs. Business recovery in under 2 hours — near-impossible on the previous all-physical estate.
Business recovery in under 2 hours
Rebuilt the entire IT infrastructure to a standard model that held as the business grew many-fold, and centralized management of firewall, switch, and PC fleets — an early step in digitizing and automating IT operations.
Standard model held as the business grew many-fold
One programme covering four workstreams: infrastructure architecture for the Hai Giang Smart City development (Tier-3-standard data center, 200 m², WiFi across 1,000 hectares); standardized data center and SSO supporting the HT App ID super app; virtualization and Azure development (Power BI, Data Lake, ExpressRoute); and migration of 4,000 users from Google to Office 365.
4,000 users migrated to Office 365 · Tier-3-standard data center (200 m²)
Earlier foundations
BS Computer Science
Ho Chi Minh City University of Technology (HCMUT), 2011
Open to senior leadership opportunities in IT, cybersecurity, and IT governance. The fastest way to reach me is by phone or email.