Cybersecurity & AI Governance Trainer (Freelance)

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

- Consulting — with a focus on strategy, investment analysis, and digital process improvement;

- IT Team Augmentation — helping clients scale and strengthen their tech teams.

The Project

We are seeking an experienced Cybersecurity & AI Governance professional to design and deliver training sessions as part of our new training offer in Cybersecurity, AI, and Data. This is a freelance, session-based collaboration, compatible with other professional commitments, with the opportunity to evolve into assessment and consulting projects.

You will have the following responsibilities:

• Design and deliver training sessions and workshops at introductory, practitioner, and deep-dive levels;

• Cover priority topics including Shadow AI, Cybersecurity Essentials, AI Governance & Acceptable Use, and ISO 27001 & NIS2 readiness;

• Develop training materials such as presentations, case studies, checklists, templates, and practical exercises;

• Define learning objectives, agendas, and target audiences for each training session;

• Adapt content to different audiences, from business and management profiles to technical teams;

• Deliver sessions online or in person, including short sessions, multi-session programmes, and executive workshops;

• Collect participant feedback and continuously improve training content;

• Identify client needs raised during training that may lead to assessment or consulting opportunities.

You need to have the following skills/experience:

• Solid background in Information Security, GRC, or Security Management (5+ years);

• Proven experience as a trainer, facilitator, or awareness programme lead;

• Strong knowledge of ISO 27001, NIS2, NIST, and GDPR;

• Practical experience in risk management, incident management, and BCP/DRP;

• Knowledge of AI governance, AI security risks, Shadow AI, and the EU AI Act;

• Working knowledge of data governance, information classification, and Privacy by Design;

• Ability to communicate complex topics clearly to non-technical audiences using real-world examples;

• Excellent presentation and facilitation skills, both online and in person;

• Fluency in Portuguese and English;

• Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, CIPP/E, ISO 42001, or a trainer certification (e.g. CCP/CAP) are a plus.

Location

Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.