Troy Rydman

Troy Rydman is the Chief Information Officer (CIO) and Chief Information Security Officer (CISO) of Packsize, appointed in April 2025. In the role he leads the company's information technology, information security, and security operations teams, and sets global information security and IT strategies. His remit includes safeguarding Packsize's data and systems, maintaining compliance with evolving security regulations, and deploying technology meant to improve operational efficiency and resilience.

Career path

Before joining Packsize, Rydman was a Senior Practice Manager at Amazon Web Services (AWS), where he built a cybersecurity consulting practice focused on improving security postures for Fortune 50 companies. Earlier in his career he held cybersecurity leadership roles at Silicon Valley Bank and Fast, where he worked on global cybersecurity programs, regulatory compliance, risk management, and technology modernization. Across these roles he worked in the technology, fintech, healthcare, and professional services industries. Packsize's announcement of his hire described him as a technology and security executive with nearly two decades of experience leading cybersecurity, IT, and risk management programs for global organizations.

Packsize's leadership page states that Rydman is responsible for the company's global information security and IT strategies in his CIO and CISO role.

Speaking on smart factory security

In a March 2026 interview with Help Net Security, Rydman was described as Packsize's security leader addressing vulnerabilities in smart factory environments, including IoT devices, legacy systems, and human error. He said unmanaged devices such as sensors and robotic components often go unpatched and become entry points for attackers. He noted that legacy infrastructure is frequently overlooked as organizations shift to cloud and SaaS platforms, leaving outdated systems exposed. Asked which part of the digital transformation stack is expanding the attack surface fastest, Rydman said, "Definitely IoT, including operations, development, manufacturers, and equipment." He explained that many IoT devices are built for productivity and require direct internet access, and that the credentialing used may not meet current security standards, raising the likelihood such devices are targeted in a cybersecurity event. He also discussed the tension between production uptime and security requirements, saying organizations can manage that balance by keeping stakeholders informed, investing in training, and building a security-aware company culture.