Security Manager, Intellectual Property Protection

Funko is a purveyor of pop culture and a licensed-focused collectibles company, holding thousands of licenses and the rights to create tens of thousands of characters. Funko’s Pop! Vinyl is the number one stylized vinyl collectible on the market, selling millions of figures to fans around the world.

About the Role

The Security Manager, Intellectual Property Protection is a leadership role within Funko's Information Security team, reporting directly to the Sr. Manager, Information Security. This manager owns the strategy and execution of protecting Funko's most sensitive intellectual property: pre-release product designs, digital assets, and confidential materials entrusted to Funko by third-party licensors. The role ensures that embargoed product designs, renders, packaging, names, and launch timing do not leak prior to licensor public announcements, safeguarding licensor trust and contractual confidentiality obligations.

The role partners closely with Legal, Licensing, Product Development, Marketing, Sales, Sourcing, and IT, as well as with licensor security teams and external manufacturing and logistics partners. The ideal candidate is an experienced security professional with hands-on data protection and DLP skills, ideally with experience protecting embargoed or pre-release content in an entertainment, licensing, or consumer products environment.

Responsibilities

• Embargoed & Pre-Release Product Protection (Primary Focus)
  • Own end-to-end technical protection of unannounced licensed products (e.g., figures for unannounced films, series, or games) to prevent leaks of designs, renders, packaging, names, and launch timing.
  • Engineer and enforce the embargo control framework, including project code names, need-to-know access, segregated digital workspaces, restricted distribution lists, and recurring access reviews across product development, marketing, and sales systems.
  • Maintain an inventory of active embargoed projects and their licensor-mandated reveal dates, verifying controls from kickoff through public announcement.
  • Deploy and manage technical protections for digital design assets, including visible and forensic watermarking, digital rights management, secure digital asset management platforms, and controlled review/approval workflows with licensors.
  • Establish secure handling requirements for physical pre-production items (sculpts, prototypes, paint masters, packaging samples) across offices, photo studios, trade shows, and in transit.
  • Extend embargo and confidentiality controls to third parties (manufacturers, agencies, photographers, logistics providers, and retail customers) through contractual security requirements, onboarding assessments, and ongoing verification.
  • Review and document systems and workflows that expose Funko confidential information to third parties, including digital asset management platforms, collaboration tools, vendor/customer portals, licensor approval workflows, APIs, integrations, shared drives, and file-transfer tools.
  • Support Legal and Licensing in managing licensor, customer, vendor, supplier, manufacturer, agency, and other external stakeholder security expectations tied to confidential assets.
  • Proactively monitor high-risk leak channels, including factory floor photography, early retail listings, marketplace sales of pre-release items, and fan-community/social media leaks, driving rapid containment when leaks are detected.
  • Lead investigations into leaks of embargoed product information, including forensic analysis (e.g., tracing leaked assets via watermarks), root cause identification, and corrective action, in partnership with Legal and Licensing.
  • Run embargo readiness reviews ahead of major licensor announcements, partner with licensor security teams on coordinated reveal plans, and support licensor security audits and assessments.
• Data Loss Prevention (DLP)
  • Engineer, deploy, and operate DLP controls across endpoints, email, web, and cloud applications to detect and block unauthorized movement of embargoed assets, licensed IP, and other confidential data.
  • Build and tune detection rules for high-risk exfiltration paths, such as personal email/cloud storage, removable media, screenshots, photography of design assets, and unmanaged devices.
  • Implement and maintain data classification and labeling for licensed IP and pre-release product data, integrated with DLP enforcement.
  • Support insider risk monitoring for roles with access to embargoed assets, in coordination with Legal and HR and in accordance with applicable privacy laws and company policy.
  • Measure and report DLP coverage and efficacy for embargoed assets to the Director, Information Security.
• Broader Information Security Operations & Projects
  • Participate in security operations, including incident response, alert triage support, and on-call rotations as assigned.
  • Contribute engineering effort to broader Information Security roadmap projects (e.g., IAM, cloud security, monitoring, and tooling initiatives), particularly where they intersect with IP protection.
  • Evaluate, implement, and support new security applications, services, and solutions in partnership with IT and Information Security engineering.
  • Maintain an incident response playbook for pre-announcement leak scenarios integrated with the team’s broader IR process, and manage incident communications with affected licensors in partnership with Legal and Licensing.
  • Support enforcement actions against infringement and unauthorized distribution in partnership with Legal and Licensing, including evidence preservation and takedown coordination.

Requirements

• 7+ years of professional experience in information security, with at least 3 years in a hands-on security engineering role focused on data protection, DLP, insider risk, or content security.
• Significant experience protecting embargoed or pre-release content (e.g., unannounced products, films, games, or marketing campaigns) under licensor or studio confidentiality requirements (e.g., Disney, WB, or similar major entertainment studios). Entertainment, licensing, retail, or consumer products industry experience strongly preferred.
• Hands-on experience deploying, tuning, and operating DLP and data protection tooling across endpoint, email, and cloud, including detection rule development and alert triage.
• Demonstrated success engineering confidential project controls: need-to-know access models, code-named projects, segregated workspaces, and coordinated reveal/announcement plans.
• Working knowledge of technical content protections such as forensic watermarking, DRM, and secure digital asset management.
• Solid general security engineering foundation: identity and access management, cloud and SaaS security, endpoint security, and logging/monitoring. Scripting/automation skills (e.g., Python, PowerShell) are a plus.
• Experience supporting sensitive investigations, including digital forensics fundamentals, evidence handling, and partnership with Legal and HR.
• Experience assessing third-party/vendor security risk, ideally including manufacturing or supply chain partners.
• Bachelor’s degree or equivalent practical experience; relevant certifications (e.g., CISSP, GIAC, CISM, OSCP) are a plus.
• Exceptional communication and influencing skills, both internally and with external licensors, vendors, and customers.
• Ability to manage complex, cross-functional projects, including stepping into in-flight efforts, and to react quickly and calmly to time-sensitive security incidents.
• Highly self-motivated; accepts ownership, welcomes responsibility, and maintains focus and the confidence of key stakeholders under pressure.

Pay

The base salary range for this position in Burbank, CA is $121,500-$181,000 annually. Compensation may vary outside of this range depending on qualifications, skills, competencies, experience, and location. Base pay is one part of the Total Package that may include additional discretionary bonuses/incentives and restricted stock units.

Benefits

• Competitive compensation package with full benefits.
• 401(K) plan with company matching contributions.
• Creative work environment with a team that shares a passion for pop culture.

This is an onsite role based in Funko’s Burbank, CA office. Local candidates will be considered first.